Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/618aa57e-24d0-3f03-b657-b2e3e550f1d7.roa
File:                     618aa57e-24d0-3f03-b657-b2e3e550f1d7.roa (raw, json)
Hash identifier:          7UmvVDe9rWaaSQpDaW07me2V7kEC6O5reanacMrzvyg=
Subject key identifier:   6F:CB:5D:43:41:C0:04:4E:9E:30:87:7E:8A:CF:9C:21:CB:7E:EA:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C90048EEC3B49A3211980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/618aa57e-24d0-3f03-b657-b2e3e550f1d7.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:90:04:8e:ec:3b:49:a3:21:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=22dc3bb4-609e-404a-82bd-b68aa8ce64eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:2a:04:1b:69:ca:66:a7:82:fd:90:a4:40:
                    cb:09:dc:83:98:5f:58:37:69:f4:83:0a:82:b0:ad:
                    b1:19:1c:dd:bc:22:85:c7:53:a5:87:19:f1:9d:b2:
                    56:53:c2:8c:87:42:45:ca:d2:2f:e4:8f:c9:7c:f5:
                    6b:8b:5c:dd:bb:8c:e6:78:bf:33:db:9b:03:a5:6e:
                    45:d8:68:56:2d:1b:55:d5:76:97:e1:df:fa:e6:1c:
                    7e:8d:32:15:8f:74:fe:24:e8:c3:c8:77:37:79:75:
                    62:17:83:91:74:60:71:1f:c2:c5:bf:0e:1d:12:b2:
                    a7:02:29:26:26:d3:7e:7e:b4:bb:60:08:36:fc:86:
                    5c:55:96:d8:f2:d4:65:bf:10:37:9b:fc:77:6a:7d:
                    17:64:76:18:f0:8d:7d:69:19:f1:e3:38:6e:bf:47:
                    e5:03:43:7b:4b:61:0c:2f:bd:3d:54:b0:65:57:25:
                    bd:be:5c:8b:fa:80:2e:5f:91:6e:82:bf:34:2d:73:
                    a1:32:d6:3c:44:2a:ae:19:01:2b:ea:e4:50:4f:d0:
                    c5:de:b4:6f:3b:30:93:d9:b0:8d:f1:8e:29:c4:90:
                    ca:16:b7:27:03:dc:08:bc:15:36:ce:c4:78:25:54:
                    9c:d8:08:5c:17:e0:97:14:d8:d0:93:be:03:52:cc:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:5D:43:41:C0:04:4E:9E:30:87:7E:8A:CF:9C:21:CB:7E:EA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/618aa57e-24d0-3f03-b657-b2e3e550f1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8e:a9:6f:4d:fd:f2:00:a5:6e:10:83:f1:6c:ab:c2:ea:d8:
         65:fa:b2:4a:58:a1:27:85:c8:65:39:64:16:08:b4:b3:1c:db:
         06:b2:66:39:bc:a6:17:23:c9:d8:6a:34:6e:5a:2e:43:b0:71:
         ec:19:5b:e9:ea:ac:82:4f:03:47:6d:f1:9c:83:78:8f:e4:e9:
         c2:31:79:0a:03:17:38:45:70:0e:f3:3c:55:41:22:53:e7:59:
         c7:32:4a:9b:4d:23:ae:a4:d3:23:25:88:cb:0c:a9:1f:67:09:
         dc:43:85:6f:3d:20:de:66:46:5a:26:ee:68:06:3b:a0:52:27:
         41:d0:9d:45:18:a6:99:f5:a0:a6:18:bc:f5:2f:8e:57:9d:b1:
         2b:75:f0:81:ac:b3:25:bd:46:92:3d:09:6b:7e:9e:42:f5:61:
         6d:96:e6:52:8e:80:a5:96:82:c9:20:cc:0c:42:ee:e5:f2:2e:
         12:97:6e:04:1e:b3:e5:62:e2:22:20:11:6e:08:60:5b:dc:a2:
         ec:ba:e6:80:46:d3:11:d8:e3:f3:ac:b2:a0:f7:56:03:0d:3e:
         0c:0f:82:31:8a:3c:d3:3b:7c:94:91:2e:3c:1d:80:73:ab:6c:
         76:4c:dc:13:9c:ca:b3:9f:e0:63:ed:97:16:de:0d:a9:46:2f:
         e6:1c:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:28 2025 by rpki-client