Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a3eada4-2eab-3d06-9c2c-bd6cc947aa67.roa
File:                     5a3eada4-2eab-3d06-9c2c-bd6cc947aa67.roa (raw, json)
Hash identifier:          teJwLxOgrTrAvIVzjpiIi3ZRrJgqJwvP48TXpZsMTG8=
Subject key identifier:   B4:A4:95:2F:92:F3:AB:10:87:81:FC:67:A0:08:6A:9D:05:F8:6B:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3726FDB8F8BF022C0944C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a3eada4-2eab-3d06-9c2c-bd6cc947aa67.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:26:fd:b8:f8:bf:02:2c:09:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=ae972ad9-1e68-4e7a-bb50-e7df91a34e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:d0:0b:4a:fd:08:5b:f6:fd:8b:bc:5d:84:
                    a3:4c:0c:72:92:2a:8d:d0:57:10:13:e6:0b:0e:3d:
                    fd:a7:00:40:e1:9b:d6:da:04:80:f9:60:55:ba:60:
                    e4:2f:c4:62:61:fb:06:08:13:d3:e2:a5:37:ed:7a:
                    62:1a:7c:30:00:52:d4:5b:ca:c9:81:52:3e:a1:13:
                    6e:f3:cc:12:51:1f:68:d8:69:61:b9:b2:81:51:52:
                    d7:b4:3f:51:7f:8d:4b:94:b1:2b:5a:19:a1:19:13:
                    20:68:f1:95:ed:6f:f1:c0:ab:57:fa:9b:64:21:38:
                    9c:5b:b4:1e:45:de:bb:03:4c:4c:2e:eb:c1:93:6d:
                    28:5f:17:be:c7:bb:62:fa:a9:fc:f5:9d:34:56:07:
                    6a:15:f0:ab:53:59:17:ff:4a:4e:92:69:2b:0c:42:
                    7c:84:92:9d:67:78:f6:e1:c7:ab:99:86:f7:c6:de:
                    f3:1c:1b:74:64:c5:74:d9:d7:1f:b9:22:5a:2d:19:
                    13:e2:f4:91:15:9f:b5:da:64:0d:07:83:5d:d9:f2:
                    ec:cd:27:67:00:b8:7d:9e:0c:45:bc:82:96:03:30:
                    66:cd:33:bb:3c:74:bb:96:ef:cb:99:b3:b4:51:f5:
                    5f:40:cd:4a:57:2c:0b:bf:89:4f:5f:e8:1a:40:c6:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A4:95:2F:92:F3:AB:10:87:81:FC:67:A0:08:6A:9D:05:F8:6B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a3eada4-2eab-3d06-9c2c-bd6cc947aa67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:cd:cd:cd:c5:78:d4:33:fd:88:8b:93:22:ee:20:fc:da:
         4b:f5:3f:a2:75:24:42:fb:46:bb:c4:8e:a2:2f:9f:d6:7d:97:
         65:45:56:a5:41:e3:72:ab:52:3f:77:3d:9e:10:cd:2a:07:cf:
         24:94:ce:fa:e0:f0:9a:22:5d:eb:35:32:f7:c8:f1:6e:b4:c8:
         fa:1c:90:a5:22:2d:a9:b6:64:b0:76:ad:96:20:a9:cc:11:b1:
         5a:59:5f:c1:00:5b:6a:b8:45:35:a5:db:55:56:dc:8f:38:42:
         38:ee:5b:df:fb:f2:84:fb:3d:b5:fa:6b:04:89:a0:2d:30:e6:
         72:6b:58:e8:06:ec:bf:ce:9b:5e:4b:6f:24:55:f3:64:dc:12:
         1e:91:f6:76:11:e5:45:6e:74:a1:e5:19:f2:68:0d:38:b6:fd:
         b6:9a:08:f9:6c:ef:36:1d:3d:07:49:b7:49:44:f0:35:21:2c:
         ed:0d:ff:c8:89:77:81:1c:20:7d:4c:ad:06:18:da:22:e1:0b:
         be:92:4e:36:ad:75:42:29:86:fe:62:d8:a6:53:1e:43:56:c0:
         21:f5:80:e0:bc:41:a3:95:ee:90:ed:9e:ae:6a:10:1d:90:6c:
         6b:7d:41:0f:f2:58:28:28:c5:53:c1:eb:44:fe:56:d5:7e:e5:
         28:69:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:36 2025 by rpki-client