Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/544800a6-b8bf-3e8c-b924-a57cb9a15c87.roa
File:                     544800a6-b8bf-3e8c-b924-a57cb9a15c87.roa (raw, json)
Hash identifier:          gSWUNQOWAeote0re9ElSzBbZzknpPbFZbJue2Ef/Nmk=
Subject key identifier:   3B:81:FD:B9:D6:DD:A2:BA:8F:4B:AE:95:23:E9:01:EC:74:C8:DF:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1DD15D03D5D92CD5083C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/544800a6-b8bf-3e8c-b924-a57cb9a15c87.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1008:a038::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:dd:15:d0:3d:5d:92:cd:50:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=35926846-5bbe-4c89-8034-037af0a372dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:14:f3:cf:45:39:f8:7b:91:e4:61:58:27:
                    09:e7:82:a7:7c:15:26:14:70:2a:a9:3b:9e:6e:94:
                    ca:e2:96:a8:c3:db:6b:38:20:cc:d6:01:d9:f9:8b:
                    2b:d4:14:a6:8f:a1:49:c2:9e:b5:be:f1:af:68:49:
                    ef:ea:09:d2:39:36:88:5f:6d:a8:9c:fd:35:d2:45:
                    f5:71:12:8b:ee:7f:83:95:0e:38:10:71:56:16:8a:
                    c1:e7:30:67:60:db:48:1c:2c:55:7d:62:b6:df:b5:
                    c3:7e:cb:7d:17:11:9c:b3:c9:75:c7:48:ce:31:aa:
                    37:8d:16:de:78:b7:df:f2:d9:8f:94:18:15:f4:92:
                    9b:6b:c9:90:a3:99:e5:fe:a8:83:e7:21:d9:d6:d6:
                    3d:68:87:79:83:e3:18:e1:b1:4c:2b:c9:b0:4c:fa:
                    b2:b7:d1:4c:7f:72:52:7c:14:8e:e7:e7:71:c7:bf:
                    2e:63:ce:37:b1:bb:ab:38:eb:5d:ef:fd:22:0b:aa:
                    c8:75:e2:ef:b2:92:6f:e8:e5:0b:5c:d7:c7:11:7e:
                    ba:82:f5:48:a5:6d:9b:1f:d6:14:29:63:e3:d6:3c:
                    34:20:b5:a1:d3:59:7d:8c:5e:fa:14:36:99:9e:b1:
                    e6:ae:74:0e:9d:20:d5:cf:fa:21:6d:a0:5c:c3:cd:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:FD:B9:D6:DD:A2:BA:8F:4B:AE:95:23:E9:01:EC:74:C8:DF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/544800a6-b8bf-3e8c-b924-a57cb9a15c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a038::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:81:e4:e6:0e:74:23:82:17:8e:ff:c5:67:31:58:37:8b:3c:
         a2:4d:c4:15:02:55:c0:24:d9:71:5c:1f:46:8c:e5:60:6a:52:
         e7:fa:cd:72:9a:3c:c1:ea:9d:c3:e4:c4:e1:23:2b:d7:43:df:
         51:05:89:da:6b:bd:91:44:ff:63:0d:02:5d:eb:89:4d:58:8d:
         92:02:9d:84:c9:68:0f:ac:ff:1e:77:cd:b2:a0:d1:0d:83:e6:
         df:69:9a:5d:3a:ca:45:ec:ed:62:a7:c5:a2:a3:b2:45:49:20:
         e5:60:df:6d:56:3b:3b:d2:53:6d:ed:c2:8b:4f:0a:de:72:83:
         e5:32:b4:32:1d:c9:b1:48:c1:e1:8f:d0:5d:62:45:97:a1:89:
         b1:b8:cb:ea:0b:4b:88:c2:00:7a:03:99:bb:34:d6:8a:26:a1:
         aa:39:d2:d2:fb:75:30:21:b3:01:cf:e1:67:48:5d:3d:50:eb:
         a2:d4:37:ad:13:14:0c:b8:e4:9d:c6:31:27:26:ea:a1:f4:ee:
         01:33:30:4a:75:4f:dd:d5:cb:73:d1:a6:d0:1c:4a:ae:b3:34:
         d6:ea:b1:8e:e0:4d:96:08:89:7b:e1:c7:4d:d3:04:22:47:9e:
         c5:70:8a:51:80:f9:27:2f:ae:a0:84:c8:e3:5c:b6:e7:30:e2:
         c0:f8:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:25 2025 by rpki-client