Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa
File:                     60984520-96fe-3ee4-b325-3e7fb5978417.roa (raw, json)
Hash identifier:          aDyqqbXcKC36uninV7TqRAt/tGt7lXtxf5Qv5pQgEiA=
Subject key identifier:   34:AC:5F:E3:BF:DF:72:22:75:0E:9E:6A:EE:73:04:FA:0D:4F:CF:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9969DA760E6E7BE2B2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:99:69:da:76:0e:6e:7b:e2:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1dc148bc-bcdd-49be-bfd8-84442b90632a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:99:11:f3:97:a5:98:b0:dd:e6:c0:eb:43:
                    d8:42:d6:33:f2:cb:83:b2:69:3c:68:48:cf:f0:79:
                    89:3f:a8:ef:db:01:74:37:a4:8f:19:07:13:a6:f0:
                    0f:e9:76:e6:3f:a9:80:ea:87:26:dc:8a:78:67:93:
                    3b:27:66:f9:1b:6f:8e:64:09:2b:29:f2:68:33:84:
                    6c:f3:18:3f:78:0f:35:f4:63:60:fb:c3:7c:b1:23:
                    43:cc:dc:48:a1:f1:b8:2d:1c:c3:b5:aa:99:76:c2:
                    39:77:97:2b:5f:eb:1f:e8:78:8f:c1:73:61:db:01:
                    61:3a:25:e3:34:f2:1b:9d:76:21:3b:42:fd:85:4e:
                    30:fd:6e:eb:1b:f7:79:4b:40:69:8c:31:80:6e:6e:
                    c2:69:97:0a:6d:f7:ff:47:56:90:73:76:a5:56:61:
                    9e:5b:47:63:19:c9:be:9a:42:72:3a:99:3c:0a:1c:
                    ae:b7:70:86:61:0e:31:80:f7:21:b1:27:ed:fb:42:
                    6a:09:eb:f3:44:e9:72:3d:71:45:b9:72:c2:0b:ad:
                    21:63:13:82:d7:87:73:b2:47:3c:b1:43:50:28:9c:
                    47:af:06:07:6d:35:2c:e3:41:70:57:39:8e:8a:87:
                    28:43:d0:30:99:11:fe:e8:73:0e:e3:15:bf:d2:d5:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:5F:E3:BF:DF:72:22:75:0E:9E:6A:EE:73:04:FA:0D:4F:CF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:86:fb:e8:1c:44:0d:a9:5b:3f:66:cf:d5:c1:fb:08:10:62:
         ef:de:d4:91:b1:74:ab:fb:41:3f:fe:1d:a7:fc:73:ec:cf:c6:
         06:48:59:a9:4a:28:a6:1f:0e:6f:3a:48:35:c0:fd:a5:59:a6:
         49:11:e2:a6:22:0f:19:66:bc:7b:71:f5:24:fd:6c:06:73:02:
         05:5e:51:64:71:77:ba:33:7e:ec:8e:60:4e:f1:4c:99:c0:69:
         1f:95:67:e4:77:69:b8:8a:30:a6:0b:55:7d:65:0d:16:75:9e:
         14:99:f1:a4:4b:24:2d:68:16:0f:9c:b9:c1:89:14:0c:9c:ae:
         f3:ee:e9:36:94:38:58:9c:cb:fe:76:27:08:33:0a:e8:42:e1:
         eb:61:74:6c:16:89:12:07:43:ea:6d:c2:dd:8e:3c:5d:63:72:
         25:d6:85:f2:b6:38:32:f5:56:f5:94:2a:54:5a:da:76:98:f6:
         80:e7:96:94:fa:1b:3a:5e:14:0c:1a:ea:3c:35:cc:43:50:5d:
         9b:40:c7:c2:1a:fd:6d:93:b4:ca:1d:bd:b5:62:63:41:98:a3:
         c7:d0:03:67:2f:7d:64:11:a2:21:ba:cf:33:32:38:e0:d9:5b:
         9a:2c:29:e0:a1:9a:d4:9b:ab:a2:f0:69:47:81:c1:10:1e:8b:
         22:30:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:08 2025 by rpki-client