Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa
File:                     63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa (raw, json)
Hash identifier:          qC90HPmSJt8I7TsX43MA9ASnBUHLVk5QoUaDMfrYEVo=
Subject key identifier:   BE:D2:02:34:CC:55:98:06:9D:AF:76:E1:52:51:BB:E8:EB:80:1A:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8244B84ACEA28E524A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100f:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:82:44:b8:4a:ce:a2:8e:52:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3e9caae1-2b86-4410-bc38-b3158f2b7ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:6e:a1:84:d0:21:43:b9:f6:2a:c5:40:15:
                    07:34:00:cd:1f:e0:f2:5f:3a:4f:27:1d:b7:ec:7a:
                    17:fc:cc:22:2b:0e:9f:30:20:6c:25:97:86:b6:8c:
                    6d:eb:21:83:aa:4e:1e:ba:f7:56:78:b2:94:16:7a:
                    66:63:d0:b3:c1:c1:c4:7f:a3:8b:96:3b:2e:a8:d6:
                    d2:5b:84:c9:a3:b4:b0:4e:13:73:c9:91:9c:bf:bb:
                    b1:ce:95:f5:06:92:24:6b:3a:88:33:1e:79:d5:32:
                    33:c8:d5:cc:fa:3d:44:47:3d:ae:59:0e:2e:d0:0a:
                    b6:64:53:27:e3:53:4e:2c:b6:4b:c3:ae:33:ae:e7:
                    5e:46:51:0a:3c:f9:b3:7e:1a:cc:70:72:ad:02:34:
                    6a:d0:d1:39:fc:79:72:5d:12:b2:6f:db:62:c7:a7:
                    ee:0d:e2:91:f4:4b:82:f7:23:0b:8e:53:88:1c:ac:
                    5b:61:ad:1b:c7:c9:a9:bf:0b:23:64:7d:b1:5c:bd:
                    46:2d:2e:65:91:04:76:1a:2b:a5:ac:30:d0:70:d3:
                    3d:a1:39:51:71:0e:c6:a2:c7:28:9b:94:60:bf:ff:
                    1c:4e:9d:6d:ab:0b:87:8a:b4:d6:a7:d8:df:a0:4d:
                    70:85:8a:81:da:c5:c6:ab:1e:2d:87:90:f8:c6:9d:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:02:34:CC:55:98:06:9D:AF:76:E1:52:51:BB:E8:EB:80:1A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63c77d85-c2b9-33b1-ad98-f2b4861ef856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:b4:0a:f1:8b:12:e1:29:c3:b0:58:6d:4b:b5:91:8f:30:
         f8:59:44:8b:b0:9d:44:b1:81:9d:3f:66:ba:23:06:49:fd:2f:
         0f:b1:e0:57:d1:45:ca:e8:81:8e:df:0f:87:60:09:7e:b8:95:
         87:62:83:40:41:38:07:87:1a:8d:74:e0:68:85:5a:d6:8c:b0:
         5c:8c:97:c3:70:1c:f3:cf:82:61:ed:0c:55:24:da:f0:d8:f3:
         60:f2:24:54:d7:7b:f7:90:56:cd:be:60:d1:77:53:ff:b4:f5:
         14:58:c9:61:67:6b:80:b4:f9:6c:9b:6c:64:28:fe:d4:3e:71:
         b5:4f:22:65:94:b9:1a:42:7a:a4:14:5d:1e:d2:36:df:38:28:
         af:11:75:c9:f8:fd:04:95:55:7f:2e:f1:d2:32:c9:80:73:b0:
         57:b1:fd:d6:c8:2f:72:ba:28:45:6c:74:58:53:78:cf:e3:72:
         c5:68:95:93:26:85:58:c2:84:0b:2f:63:69:16:be:87:6c:63:
         1d:86:8d:03:cd:c0:fc:06:74:8f:04:55:51:1b:26:07:5b:80:
         51:5a:b7:68:bd:4e:aa:30:af:c8:73:20:92:dc:68:cd:07:8e:
         d4:56:b8:de:eb:9a:72:ae:2d:8c:15:76:ff:48:e6:82:ca:8a:
         ef:f6:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:08 2025 by rpki-client