Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa
File:                     5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa (raw, json)
Hash identifier:          +IPicTtW3vu7LX7qEW81Im5laZZ0A7Tl5d8oNN0++KY=
Subject key identifier:   C1:20:53:44:7F:95:80:AD:56:A8:F3:66:DA:03:2F:CB:C9:BE:96:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C821C949D7AD369E79D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100f:b0c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:82:1c:94:9d:7a:d3:69:e7:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=04d3e23e-f708-46cf-97a7-72e2503a8d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:cb:15:7e:4c:b6:3f:fb:11:04:9a:1a:17:
                    29:c7:3a:07:e4:4d:c5:cd:de:54:0f:1c:26:c3:92:
                    31:59:c2:89:71:2c:48:82:55:2a:58:1b:bb:21:86:
                    21:09:66:98:54:00:34:7f:cc:07:dc:53:40:45:63:
                    96:96:5e:eb:6b:09:bd:60:b5:b9:c3:df:4b:4a:98:
                    53:8f:08:d5:36:e5:db:9a:c3:20:b7:05:98:60:10:
                    34:aa:76:55:39:ed:86:eb:7b:24:f9:18:e3:1f:8b:
                    38:72:5d:86:4c:70:06:29:7d:e7:5e:8e:1e:df:fc:
                    08:89:a3:63:2e:a1:67:dd:1e:54:d0:14:24:d4:cf:
                    b9:46:87:38:c1:11:18:54:a2:8c:0f:2c:f4:c5:08:
                    50:a6:55:43:4e:10:3e:3d:9f:18:94:5b:5e:61:cf:
                    ab:72:7a:a4:c4:28:35:b0:3e:04:28:ae:2e:c6:82:
                    43:07:d3:10:ca:51:b9:8b:4f:0c:85:36:4a:18:39:
                    27:fb:40:e0:65:49:72:cc:e2:64:5f:c9:83:ac:8d:
                    b8:05:a5:ae:31:bf:91:34:e7:12:88:01:10:d6:7c:
                    71:3d:0e:6f:c0:95:91:5c:b9:ab:1d:6c:74:e1:43:
                    f7:51:0a:59:0a:02:8c:a7:84:bf:12:ae:e1:ea:f5:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:53:44:7F:95:80:AD:56:A8:F3:66:DA:03:2F:CB:C9:BE:96:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ef5b0e4-1a17-3e11-90a2-1d1b7d9ff2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b0c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:32:1f:0b:f0:f9:88:db:5a:85:a3:9f:00:66:c2:fe:7f:ed:
         11:b9:fe:f6:0a:f8:8f:8a:fe:b8:ec:2b:da:db:6a:26:73:22:
         4f:72:74:87:e7:91:53:be:06:66:34:5a:c5:75:58:14:7d:9a:
         c0:0f:50:cc:59:4b:b6:27:b4:77:40:f9:ad:fd:b7:04:ee:06:
         e4:4a:36:a4:ac:a3:c5:36:0b:5f:af:96:7d:8f:89:7a:dd:ed:
         64:3d:0a:23:f9:85:d5:f6:d0:90:7f:92:2f:42:83:d4:22:e9:
         da:90:fa:df:76:48:e2:2c:6b:ab:bf:fa:bc:ae:74:6f:a2:20:
         31:a9:5a:47:0b:7c:ca:f0:df:64:8d:aa:13:84:47:f2:cf:89:
         e7:0c:41:58:20:ce:5f:4f:77:ff:8c:b5:34:97:35:01:17:9f:
         22:fc:cc:9c:05:40:aa:08:5d:a2:ad:7e:a2:e2:55:78:83:91:
         64:5d:80:6b:49:3f:27:5d:98:5a:78:46:81:4e:e5:be:b9:d9:
         ef:34:37:3e:de:e7:75:93:bd:a9:8e:ea:aa:15:20:e0:6c:f8:
         ae:5c:30:f0:1a:17:5c:54:9f:44:b4:f6:ca:3f:9c:c0:df:0e:
         34:e3:52:48:9b:12:f5:41:80:ac:81:31:ce:da:e0:ac:96:b9:
         91:8b:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:14 2025 by rpki-client