Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa
File:                     5ea6e594-9582-38ef-ae02-cefadd432a0f.roa (raw, json)
Hash identifier:          Ub0k+nPK26L2quDHlA9gPzshkDw1MWfJ9t1HLTycrD8=
Subject key identifier:   31:FE:85:C1:4C:7D:82:2D:2E:90:76:5D:ED:D9:44:94:D9:57:0A:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8EEB3D887538EED90200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:a121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:8e:eb:3d:88:75:38:ee:d9:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=13aca045-dd24-450a-8137-c0604054587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:70:65:34:de:d9:38:27:ac:3d:f4:0c:9a:
                    0c:1d:ce:21:f0:0c:87:d1:18:1a:90:bc:cb:1e:79:
                    ad:be:46:63:77:00:02:5b:e1:f1:3e:3f:9e:21:02:
                    af:0a:96:5d:ca:55:f9:fc:25:bc:04:d6:a3:21:6a:
                    d7:70:e4:ba:59:76:80:ca:7b:b4:9a:d0:c4:f3:16:
                    b0:bb:0b:96:4b:d7:d2:27:78:16:a5:bb:8d:e0:29:
                    5c:d5:90:bc:c0:ce:b0:27:a5:6a:82:a4:01:a3:f7:
                    bb:bb:7e:48:ea:36:e1:f2:9a:f2:cf:a9:ec:79:bd:
                    9f:21:be:87:b6:17:58:86:92:0f:3a:cc:7a:4e:1d:
                    24:e2:b0:df:f2:14:59:42:de:ff:c1:e8:9a:0d:f4:
                    e4:fb:1e:7e:e9:6f:ed:5c:42:f5:67:01:8e:ee:b1:
                    25:5d:b5:99:c0:87:ed:8f:7a:dc:fa:5c:7c:fd:d9:
                    fc:ab:04:a7:47:0f:14:b4:71:de:54:24:f3:0d:0a:
                    7c:46:0a:b8:ca:8c:17:39:1e:82:e4:02:7a:cd:f2:
                    b0:13:1f:3b:f2:d3:e7:cb:98:5b:f2:af:90:37:26:
                    7a:2c:0d:e5:73:72:ce:44:ab:7f:9d:10:0f:b5:da:
                    53:52:d3:c4:4a:0f:51:04:26:71:c9:2b:d8:5f:36:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:85:C1:4C:7D:82:2D:2E:90:76:5D:ED:D9:44:94:D9:57:0A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:0f:19:4f:63:6b:4e:53:cd:48:07:ff:26:e1:15:a7:c3:
         a6:2a:03:37:c3:2b:32:e3:fd:f7:6b:eb:c6:7c:8f:88:cc:b9:
         66:ba:2b:7d:51:b1:cc:4b:3c:1f:33:a8:c4:79:6a:fa:ab:ac:
         09:38:ba:62:2d:97:43:1f:16:cb:5a:40:b2:77:2b:b0:a3:3a:
         2d:35:49:16:ad:93:c8:7c:d6:b0:8a:80:c9:e7:73:85:45:e1:
         bf:9b:0b:b9:42:54:13:72:c8:03:11:c9:01:5b:15:bb:14:d8:
         53:72:58:d9:c9:6f:db:08:b7:c3:59:f1:81:cf:ad:7c:1b:b0:
         8d:89:9e:9c:3c:bb:30:9a:19:0d:a7:79:db:b8:55:d2:be:d2:
         cb:4f:e1:e3:80:74:3f:31:89:3b:9f:d9:b9:6d:a8:d1:b7:c6:
         f5:17:5b:dd:31:40:d6:ef:25:3a:f2:10:0f:01:f8:6d:6f:c7:
         32:99:7b:f0:26:11:45:9e:77:a9:86:66:15:9c:ad:e0:67:b0:
         42:47:94:b6:c6:80:3b:7d:a0:ad:13:30:18:6b:7f:03:79:d5:
         37:a4:42:14:81:05:70:b7:61:82:01:f2:c7:25:11:1c:f8:da:
         6f:95:63:9a:31:0e:c4:ee:96:b1:17:5a:23:12:52:7e:c9:6c:
         6d:a9:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:30 2025 by rpki-client