Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa
File:                     5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa (raw, json)
Hash identifier:          LKrdinN3lLT0ztTrKez0IYm1G4yP37Jx9xDdIldFmBM=
Subject key identifier:   1D:DC:5E:D3:D5:96:B2:5D:7E:FC:71:D4:55:C7:50:7D:E5:C9:6B:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A11803C6ECC7CEB219E60A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1011:b1c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:80:3c:6e:cc:7c:eb:21:9e:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=1a59904d-963c-473b-97f6-00260c8defee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:63:35:43:e7:6d:7c:b1:f1:85:80:6a:b8:
                    18:33:09:a3:a4:de:12:27:89:7a:ba:82:58:da:c7:
                    d7:b6:b2:9f:9f:ed:05:de:75:57:5b:9e:13:70:6e:
                    ec:58:0a:f5:37:b9:0c:95:fe:88:f0:bd:83:84:e8:
                    a0:1d:88:b1:13:09:99:b8:a4:73:1d:51:73:c7:8c:
                    6e:d2:a2:59:fe:34:b2:3f:d6:d4:2b:e4:8d:a6:10:
                    94:49:48:e6:d9:f9:d1:e7:61:ee:93:cb:1f:59:6e:
                    37:9a:b7:73:d2:09:64:f1:e0:f0:15:56:9f:a5:3e:
                    47:83:0b:ea:36:89:cb:87:19:71:7e:0f:6f:f6:dd:
                    cb:6b:fa:f7:b6:5f:c8:4b:f2:04:ab:80:61:65:e7:
                    7d:a7:cf:50:9f:58:ec:58:d8:eb:6b:aa:8d:c1:33:
                    31:cf:d4:d5:c9:7f:86:88:18:ac:5b:4d:10:7c:da:
                    bf:63:61:85:a3:0e:e9:c5:b4:9e:68:89:97:c1:ea:
                    33:6c:07:9e:ce:74:12:dc:51:04:ac:ac:50:66:7a:
                    1c:21:01:91:cf:f0:50:26:f6:65:b2:86:5c:d6:ea:
                    f5:7e:5b:32:5b:16:f3:c2:27:42:27:ab:2a:fb:5e:
                    b5:34:4e:7b:24:3c:06:03:4e:04:68:00:96:88:d4:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:5E:D3:D5:96:B2:5D:7E:FC:71:D4:55:C7:50:7D:E5:C9:6B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b1c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:eb:f5:78:d6:f7:2d:fa:1f:77:7c:e8:83:5f:e5:ae:87:57:
         f8:6f:ef:7c:5b:60:37:3e:a8:7a:8e:c5:b9:d2:69:d7:76:34:
         c5:c0:bb:70:ed:a8:57:cf:dd:fa:84:8f:7c:15:10:87:71:83:
         0f:fd:82:65:de:1e:41:2f:56:86:6a:eb:b3:4c:2a:c8:7b:78:
         cd:27:33:ea:c5:30:4f:0f:6b:da:13:b7:57:34:ad:0d:1c:10:
         f8:01:eb:b7:fc:c3:ff:56:0a:fb:eb:64:bd:5f:fa:50:25:f7:
         78:7a:53:ea:ac:07:29:32:a4:d4:89:65:d7:e8:52:4c:3c:13:
         c8:d2:e2:b9:7b:ec:08:13:b2:6e:bd:87:75:9a:f7:d5:61:dc:
         8a:51:e2:d8:07:74:4d:2d:36:40:05:e1:2f:20:9b:18:a1:76:
         8e:ce:98:36:82:2d:f4:a4:d6:f7:61:ae:e1:a1:fc:97:a5:06:
         3f:92:ac:02:20:62:49:8f:a1:df:3f:b3:cb:3f:7a:67:e1:f8:
         54:d2:97:84:8c:3a:8d:61:69:5e:28:04:62:6e:79:cc:f3:01:
         46:2a:5e:d1:12:e3:a8:7e:bd:c7:36:20:8a:54:58:2e:3c:07:
         07:6d:1b:6f:f4:d1:0c:42:b7:c1:0e:e5:e1:9f:34:ad:b8:31:
         e7:37:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:31 2025 by rpki-client