Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558548e6-ea7f-348e-aa6f-f0193e46bf87.roa
File:                     558548e6-ea7f-348e-aa6f-f0193e46bf87.roa (raw, json)
Hash identifier:          XKhG17xpKZjAqHan1UoggjVwp1cEqUc0cednwGqwlF0=
Subject key identifier:   63:50:90:B2:02:A5:5D:2E:F7:AD:73:4D:50:F0:32:D1:D2:59:B4:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6367444841294F476D264100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558548e6-ea7f-348e-aa6f-f0193e46bf87.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:100c:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:44:48:41:29:4f:47:6d:26:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=c589fe81-9e41-4659-a116-7c37f5acfff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:6d:81:53:67:b2:b6:c6:98:c8:18:58:1a:
                    c0:df:53:46:2a:3a:b1:16:67:cc:50:33:6e:27:f4:
                    0f:26:45:00:a9:ef:6c:16:a2:b7:c4:d3:b5:fb:bd:
                    ec:a2:d3:4e:a9:b9:c1:93:89:1f:cb:9f:ba:1c:7f:
                    f9:88:4d:d4:de:00:01:9e:d4:3a:1b:f1:a4:76:c6:
                    95:94:04:95:7a:ac:33:30:ed:17:45:e7:3a:b6:b7:
                    07:81:3a:91:06:e5:00:06:b5:45:0c:63:83:75:17:
                    60:e0:03:1a:0b:ec:c9:02:6d:56:42:90:44:2c:4f:
                    93:c4:94:12:fb:a1:de:50:37:bd:15:55:c2:97:be:
                    08:f8:69:cd:89:88:de:d4:c0:17:c9:80:f6:a2:e9:
                    d3:a4:9e:84:dd:68:11:89:c9:a3:8d:5a:5f:1b:1e:
                    36:59:58:6e:25:11:09:59:55:1f:6e:1a:18:8a:ee:
                    ea:e3:48:a1:2c:e7:b2:f1:79:13:8a:b8:fa:fd:34:
                    c5:0d:94:5b:a3:aa:63:b2:31:65:21:5e:a7:37:88:
                    b1:07:71:c2:7c:c3:34:5a:11:96:8d:48:8a:37:db:
                    f0:5b:0f:93:a7:66:48:7a:3c:92:b8:d5:88:24:4f:
                    be:e9:89:1c:77:f1:bc:1c:1d:75:cc:8f:e2:db:3c:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:90:B2:02:A5:5D:2E:F7:AD:73:4D:50:F0:32:D1:D2:59:B4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558548e6-ea7f-348e-aa6f-f0193e46bf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:ed:d9:64:ef:d7:53:b0:32:c7:a4:93:6d:a8:9f:d5:b9:
         40:37:34:44:dd:e2:83:a2:1a:75:17:8d:79:44:9f:43:bb:60:
         24:5c:67:88:e6:3c:63:b6:03:bd:74:7e:95:f8:4a:95:41:2e:
         15:03:c3:86:f5:97:bc:a1:f4:c6:0c:dd:fb:8c:3a:b7:0f:19:
         8f:6f:01:5a:fc:be:40:94:18:7c:8e:cd:15:39:0f:09:a1:9a:
         c8:b1:6d:e1:7d:d8:a6:b1:41:15:dd:c6:97:c0:95:1a:31:9c:
         d7:43:e1:44:33:5f:77:7a:64:25:ca:2f:7a:e2:10:bb:92:25:
         1e:ac:53:00:d2:d7:33:58:79:c9:20:a3:42:0e:3f:fc:bc:b9:
         e9:18:b3:0e:70:6d:b0:87:76:57:13:3f:72:b2:f9:1d:29:bb:
         45:28:93:e1:9a:10:a1:62:1d:21:ca:20:d0:28:2b:a3:32:4e:
         d5:89:b7:de:e2:e4:ae:c9:bb:75:45:44:a5:a8:69:1f:36:8a:
         4c:2a:b5:de:68:3a:5f:e8:7b:73:d6:0d:10:2a:e1:5c:da:1b:
         5e:43:73:d4:bf:09:a6:66:55:3f:32:96:fd:28:22:56:f4:92:
         3d:70:7f:0a:32:de:df:5f:64:6c:2a:30:32:b7:3f:03:8b:75:
         d2:7d:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:50:43 2025 by rpki-client