Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/619e9770-d46d-3ca6-8981-cdec3626fa5f.roa
File:                     619e9770-d46d-3ca6-8981-cdec3626fa5f.roa (raw, json)
Hash identifier:          GdvAU4QtrOxE3PHr4Occ7dF5PwMRALOhjdfWnKreL94=
Subject key identifier:   04:28:A3:DE:46:17:07:F4:41:79:6C:06:1A:BB:CB:9C:F6:A4:87:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371BD67DEE29025B529580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/619e9770-d46d-3ca6-8981-cdec3626fa5f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1b:d6:7d:ee:29:02:5b:52:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=177e1fb7-d8d0-414f-a1c8-0d583db863f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:76:0a:7a:ba:04:00:6b:75:05:73:e5:e5:
                    99:ac:0c:3b:ef:b5:db:49:84:c0:a5:ab:74:cd:0b:
                    8e:05:1f:8a:f3:c4:76:50:94:98:61:ff:fe:62:cf:
                    d7:fe:ba:c9:4f:8f:f3:28:65:3f:81:11:b1:5a:64:
                    1d:ca:db:85:dd:be:30:1c:ea:9b:70:a2:d3:fa:d0:
                    fc:14:71:2a:76:35:a1:ea:2a:1e:bb:29:90:da:f7:
                    50:0c:be:38:99:5e:a4:34:5a:65:ef:9c:da:2c:83:
                    f5:96:d7:f1:1d:57:0c:14:0a:5b:4f:65:9c:4a:d8:
                    b6:21:98:ef:7a:d4:bb:83:dd:5a:8e:40:7f:e1:fe:
                    e9:d0:0d:be:b0:84:51:08:69:5d:1d:b0:a0:6e:e0:
                    86:6d:16:d1:85:1a:49:7a:7a:c6:34:6c:9c:58:9d:
                    2b:c2:42:2a:49:71:25:f5:55:d2:c9:e6:6e:91:03:
                    d7:2e:05:de:51:c9:af:50:73:21:eb:13:6e:50:05:
                    c0:c3:2f:01:c4:c4:44:73:c0:2c:b7:5a:98:d2:11:
                    5b:ac:09:b8:c5:5c:8a:48:61:33:22:7b:f5:a1:b3:
                    d5:f8:7a:ff:46:d0:92:07:34:2e:a8:d4:fc:e8:f6:
                    80:4d:d7:e0:5d:47:c8:fe:49:f2:bf:a8:e5:c7:d9:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:A3:DE:46:17:07:F4:41:79:6C:06:1A:BB:CB:9C:F6:A4:87:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/619e9770-d46d-3ca6-8981-cdec3626fa5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:25:5c:bc:e1:89:bd:31:e1:61:ee:92:2d:f5:ee:eb:dc:1f:
         9e:2b:cf:c3:9b:2a:3f:d6:17:c5:6f:90:55:bd:3b:0d:17:b2:
         07:f7:45:10:94:6d:d5:7f:66:10:66:04:c1:72:1b:b5:41:b8:
         13:0a:21:77:df:fa:b0:e9:35:07:16:8c:9e:18:90:ce:0c:ac:
         9a:d0:fa:3e:58:36:35:40:da:9e:2d:95:80:a6:30:c5:fe:47:
         72:48:74:f9:66:46:a3:94:3b:1d:c5:3b:f8:15:66:5d:01:13:
         c2:68:72:52:a7:19:58:21:91:aa:8e:ed:79:41:91:2a:f2:31:
         cd:74:2d:eb:54:46:54:84:e0:2d:f0:b5:3e:7a:43:73:a8:fd:
         02:f6:f3:b2:d6:01:72:bc:43:3c:13:c4:6e:72:22:cb:3b:83:
         d2:4d:17:6a:0c:38:3b:16:e4:9d:34:0e:5b:34:4e:74:3f:50:
         91:0e:00:fe:21:ab:07:d0:81:c4:6b:97:a2:52:89:e0:59:89:
         ef:7c:49:5e:ea:36:19:86:ab:97:27:09:07:56:be:c8:e1:ad:
         7e:2c:49:fb:56:9b:64:67:d6:71:8f:c0:77:50:1e:2c:43:27:
         de:14:d3:2b:10:04:9f:2f:1a:60:fe:04:f0:b4:ad:e9:a6:06:
         6a:c9:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:10:21 2025 by rpki-client