Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa
File:                     5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa (raw, json)
Hash identifier:          b10M2MyrZRE7OsE706LfvkhOS090M+0tLOmtaipAlDc=
Subject key identifier:   B7:B0:12:DE:6A:E8:26:26:0F:D2:62:F0:33:C0:48:CB:F4:99:73:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A11880CD3359BC2C7730180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1015:b220::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:88:0c:d3:35:9b:c2:c7:73:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=42763781-f529-42ab-99f7-381fecfa2dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:43:d1:2b:21:a2:f2:4e:1c:eb:a7:33:6c:
                    ac:97:d7:23:e4:8e:b4:f2:a1:58:8e:3a:d5:91:95:
                    7f:d8:5a:0f:e6:7b:b9:36:94:d5:ed:7b:a9:08:6d:
                    36:f2:b1:51:d9:4a:fa:1c:86:e5:d7:aa:a5:3c:d0:
                    68:fd:73:64:69:60:12:95:cf:59:96:30:00:82:d2:
                    72:d6:cc:14:5e:9a:3a:5d:25:ea:c9:dc:71:91:4b:
                    19:6b:d6:f7:c1:b1:98:37:4a:47:42:cc:da:12:56:
                    30:8b:97:e6:7a:07:1b:6b:3a:af:a9:c0:17:bf:ce:
                    44:ff:6e:60:91:3b:c0:e2:d4:aa:c1:fa:56:2b:24:
                    00:bc:45:c2:a6:82:aa:af:77:9f:0c:65:03:3f:1e:
                    04:5c:88:63:1c:72:f7:ad:d6:b1:61:ad:b1:c8:cd:
                    02:d0:7b:22:6d:4c:02:d0:81:7d:8d:3d:08:38:b6:
                    99:30:b3:4f:05:75:e4:df:77:ba:8f:96:72:b0:61:
                    0b:13:5f:2f:1f:00:34:6b:99:cd:cb:6e:01:3f:6e:
                    bc:fd:41:df:8e:3d:85:c1:00:51:d1:97:84:ca:00:
                    c6:94:1b:49:fc:c8:0a:2f:3b:c4:2a:5a:a6:3f:98:
                    26:08:94:8b:11:22:0a:32:14:ba:a8:85:a7:8e:50:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:12:DE:6A:E8:26:26:0F:D2:62:F0:33:C0:48:CB:F4:99:73:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b220::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:e3:cb:89:02:e1:fb:f9:26:e8:d4:37:9e:a6:cf:88:e8:
         ac:a8:b8:fa:c6:85:32:07:56:26:8c:fb:05:30:a0:94:7c:a6:
         21:b3:99:9c:3b:35:f6:e3:25:b3:e2:b6:21:b8:3a:85:67:80:
         53:75:11:9d:c7:a3:da:b7:d5:69:3e:10:e0:d8:71:e1:e8:c2:
         41:8a:5e:03:70:fc:27:b9:b9:9d:5e:78:1e:77:57:7d:d4:47:
         83:ef:6e:93:fb:60:31:e0:ad:a8:24:db:cc:67:0b:6f:a3:be:
         c2:de:f7:4b:41:6f:ac:da:19:95:29:d8:df:a9:c1:3b:72:19:
         d3:9b:10:b4:a9:97:df:b3:dd:58:6e:02:f0:39:7d:98:a8:bd:
         5e:00:f0:c1:1e:95:5a:05:d2:24:51:a6:44:03:b2:0c:5d:be:
         4b:24:dd:d8:39:69:e7:cd:09:8f:e0:f9:29:0e:56:a6:1f:e0:
         3b:7b:64:b0:1c:c2:50:20:1f:6e:a2:7b:9a:79:dc:05:95:ef:
         d8:a9:9d:ac:43:40:39:32:91:38:f0:04:e6:a7:5c:e4:cf:4e:
         a5:f4:a3:bf:a5:fd:88:11:f3:d3:34:b5:ab:5c:c8:13:dd:cf:
         37:1c:d3:3a:8c:9e:4c:7d:fc:70:03:41:6f:15:41:80:a5:16:
         16:34:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:05:36 2025 by rpki-client