Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa
File:                     5aa4b57e-1992-375b-9dff-43664b6801a4.roa (raw, json)
Hash identifier:          rg/RB7GmRFLHrjdgwa4w6u2uyUVPIfWgzR/dwnSzszw=
Subject key identifier:   1D:B6:96:98:06:F7:74:97:F0:69:68:F7:55:0A:99:A8:B2:ED:F9:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371D645BCBD16AB8419760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b0e8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1d:64:5b:cb:d1:6a:b8:41:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=aadf5ef0-e31f-423f-aeef-0c3fe3ff723e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:56:43:95:b3:60:eb:bf:13:44:e1:6f:4a:
                    b3:62:8a:55:3a:7c:a8:97:89:98:2a:af:5c:d5:78:
                    30:e0:78:ec:1d:d8:f4:ff:db:26:a0:9a:03:67:bb:
                    cb:72:4b:8a:d0:dc:4b:b5:44:b8:1a:64:e0:38:bb:
                    55:9b:b9:2d:c1:e1:13:99:f2:79:1f:5b:65:21:3a:
                    f7:55:24:4e:34:eb:5e:77:44:37:dc:49:04:c8:43:
                    7e:02:6f:ef:cf:71:29:db:1e:58:89:6a:23:dc:70:
                    20:cb:39:47:d8:27:40:92:8c:43:74:dd:a9:c0:31:
                    1e:1e:63:09:58:5c:a9:e1:52:5a:38:48:56:0d:5c:
                    9e:33:93:ea:8a:79:21:a5:22:49:1f:2e:3a:8b:a6:
                    11:b8:c7:07:ec:3f:b0:59:f7:e9:1c:30:70:a8:37:
                    aa:af:33:e0:fa:bc:39:08:3c:61:64:32:40:9c:8c:
                    5c:6e:28:ef:79:8e:29:a5:17:cc:89:66:54:13:f1:
                    b7:8f:9b:b9:0b:7e:0c:b3:ed:90:65:e9:07:2c:e0:
                    35:3e:31:ab:93:8a:5e:9b:12:eb:48:e3:41:13:85:
                    e7:fc:f5:a3:79:7f:e9:01:16:f6:1d:2f:79:c9:dd:
                    03:1a:44:72:5c:d7:f7:fa:18:bb:f3:73:8e:e4:85:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B6:96:98:06:F7:74:97:F0:69:68:F7:55:0A:99:A8:B2:ED:F9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa4b57e-1992-375b-9dff-43664b6801a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b0e8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:e1:14:4b:27:6b:75:c3:98:59:b3:d3:49:92:4c:34:14:
         2e:fb:fd:39:60:2e:0c:a0:3d:07:1d:f1:18:63:00:d0:1e:af:
         81:cd:a7:c7:4e:0d:13:66:81:3e:ba:b1:89:e5:b0:5f:5f:9f:
         80:48:47:7d:52:a5:95:7b:68:ab:47:6d:4d:df:3e:86:ff:eb:
         4b:a8:05:fc:73:b1:af:6a:50:57:62:16:3a:9c:a7:48:28:5f:
         06:d1:c4:9c:c9:35:a5:fb:09:24:69:83:bd:31:78:f5:91:44:
         bc:80:cb:4a:15:7e:80:a9:db:f9:ad:ff:9d:f8:28:f1:02:63:
         85:fe:d2:67:58:f9:3c:73:83:2f:b9:78:14:06:fd:e8:ff:a6:
         4e:ac:d2:bd:1b:a2:c3:c3:fc:ac:81:39:9f:fb:9f:55:41:9c:
         f9:37:6f:f6:65:50:4d:10:e6:88:83:90:29:de:8c:93:a4:d8:
         5b:52:e1:c0:b6:03:2c:b3:53:5f:97:c3:52:f5:0c:a8:ea:d8:
         6b:26:65:e6:cd:be:69:f8:a0:04:3a:16:c8:6a:e4:aa:5f:4b:
         a2:d8:8b:24:a4:2a:ea:bf:0e:87:98:65:93:85:5f:6d:a6:e9:
         aa:40:9d:bc:81:a4:39:67:1e:2c:06:09:6e:7d:41:66:6e:07:
         bb:f2:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:39 2025 by rpki-client