Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6801938d-652d-3a9b-a717-e49d9ae29998.roa
File:                     6801938d-652d-3a9b-a717-e49d9ae29998.roa (raw, json)
Hash identifier:          UsdSoMrm6+n8YsOEBlguqOFhHz9PLD/1J4lYP+kO8EE=
Subject key identifier:   7F:DC:31:81:63:B8:65:FC:4B:3E:8F:2E:25:32:CD:AA:71:8D:96:9C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A118256C07F344C024D9540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6801938d-652d-3a9b-a717-e49d9ae29998.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1012:b072::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:82:56:c0:7f:34:4c:02:4d:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=d71a126d-7ea7-4712-83cf-19fe6068ba5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:3b:a7:9c:f4:b3:e4:40:70:95:bc:9a:a0:
                    52:dd:c3:23:aa:5e:8a:72:46:12:ba:9c:3e:23:2f:
                    44:ad:ac:89:4b:91:a3:25:de:af:d4:f5:69:1c:8c:
                    ea:29:96:a9:95:6b:24:4b:ae:54:72:fc:3e:02:ac:
                    61:8e:1e:fc:60:24:bb:86:05:53:39:a7:10:ea:ed:
                    25:d3:63:b7:f7:f9:bc:4f:22:a1:f6:4e:1f:02:c5:
                    62:87:89:e7:56:53:2d:46:bc:49:fd:e5:76:0e:e9:
                    81:40:f7:11:cf:47:03:94:cf:35:3c:32:d0:ec:f8:
                    87:74:0d:ba:b3:93:de:05:bd:b9:b3:0c:a0:11:49:
                    b8:01:50:cf:42:fa:e0:79:e7:b5:33:bb:74:29:1a:
                    c7:c0:54:8a:83:1d:4f:40:b4:b0:fa:bf:f1:fd:b9:
                    03:63:fb:89:45:60:23:bc:43:7a:5e:c8:bb:4d:ac:
                    9b:95:ae:1a:73:b9:1c:c6:d6:b7:36:69:52:69:e0:
                    b4:e8:ba:86:9c:7b:4f:9f:38:6a:0c:73:3b:e7:c0:
                    51:a7:5b:54:10:69:5c:1e:94:af:4a:ee:8e:c8:2c:
                    6f:64:83:ab:4f:8e:9a:23:a7:12:52:5d:28:3c:54:
                    1c:fc:91:15:d7:b7:e5:22:23:d3:5d:f8:79:22:8b:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:31:81:63:B8:65:FC:4B:3E:8F:2E:25:32:CD:AA:71:8D:96:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6801938d-652d-3a9b-a717-e49d9ae29998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b072::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:db:b0:e0:88:34:cd:9c:57:c6:92:c8:e9:9d:37:11:94:3e:
         cb:60:7c:99:bc:ac:7e:05:9a:09:02:66:b2:8f:87:44:77:94:
         ec:26:85:52:64:8b:b9:77:df:11:93:a0:04:9b:ba:25:b9:ad:
         9f:95:17:03:5c:aa:3d:e0:48:b7:57:6d:4b:88:58:aa:aa:43:
         c2:ba:50:82:a6:88:93:97:15:07:f0:ca:a3:02:af:4b:f2:d0:
         87:e7:ad:1e:bc:7c:b4:a6:a6:bc:11:ce:96:00:21:c0:9a:05:
         33:93:22:cc:67:2e:fb:70:40:6b:91:c3:94:4f:06:6e:86:79:
         a4:3d:4d:2e:d4:96:48:c2:db:24:de:bf:7b:dd:e0:28:eb:8c:
         21:92:04:c1:c2:24:84:a7:2a:ff:5b:84:e3:47:d0:89:69:a5:
         64:09:4e:be:b1:7a:73:fd:6c:a0:5f:c0:66:3f:fa:78:8d:00:
         71:8e:59:a9:fc:9b:87:b5:4d:ba:9e:08:90:ce:4b:9b:bf:8f:
         f6:62:b6:5c:21:21:ea:94:94:c1:e5:f0:73:21:c9:d6:fd:79:
         fc:eb:f1:2b:bb:6d:63:aa:77:db:22:3a:84:ae:f5:2c:13:c7:
         58:42:24:27:65:e5:33:2a:6a:84:c7:51:25:3a:a0:1e:a9:eb:
         ee:ea:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:46 2025 by rpki-client