Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e668605-212a-362a-8217-58e24eb364af.roa
File:                     6e668605-212a-362a-8217-58e24eb364af.roa (raw, json)
Hash identifier:          HqSXqYclVyuicmQgDN5+O+28M3RbvwnRwHfvcU6SctU=
Subject key identifier:   08:0D:DD:E0:75:EC:FC:81:DF:3A:05:94:72:9A:84:CE:F1:9C:76:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1EADE62FD32FBCBDFF700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e668605-212a-362a-8217-58e24eb364af.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1017:a018::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ea:de:62:fd:32:fb:cb:df:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=3b3dfd6a-15ea-4a40-9b32-7615f659d83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:60:4e:80:a6:43:d5:46:b6:31:7b:37:25:
                    22:f9:81:1d:89:3f:a1:53:ef:d4:aa:f2:52:0b:11:
                    1c:9a:4d:06:fc:19:3b:42:95:dd:11:f1:6b:df:c4:
                    e9:20:62:ea:35:ef:7e:41:3e:83:8e:2e:94:7d:c8:
                    fd:0e:e9:97:d0:53:8f:6d:86:89:dd:1a:8c:d9:32:
                    d6:d9:36:4d:01:16:32:1a:9e:ef:2f:64:31:1b:21:
                    8a:75:1a:c5:42:c0:2f:37:15:a5:e6:63:e8:63:5a:
                    20:ac:6e:17:77:58:5f:bd:e6:28:88:c1:4d:63:a1:
                    5f:e6:3d:6e:92:b6:26:54:81:c3:d2:1b:f3:4e:4e:
                    33:76:7c:30:4b:a6:6f:dc:55:cd:55:5b:d8:dc:f6:
                    ea:e6:4e:bf:cd:82:d5:6f:b7:4e:79:1a:6f:7b:35:
                    26:3a:ea:e7:4e:06:89:1b:d7:7c:14:3f:96:eb:82:
                    de:f7:b6:83:8a:74:71:31:d5:90:8a:53:ed:97:98:
                    14:23:ab:fb:d8:b9:35:e9:98:58:44:75:ce:fa:01:
                    84:50:51:de:f7:b4:6e:01:5f:fa:c1:5b:f9:b3:39:
                    33:12:4a:1d:75:82:3a:29:67:d0:30:c3:43:77:ae:
                    38:1b:f2:a0:2f:77:bc:61:6a:12:1b:33:23:32:28:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:DD:E0:75:EC:FC:81:DF:3A:05:94:72:9A:84:CE:F1:9C:76:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e668605-212a-362a-8217-58e24eb364af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a018::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:c3:d9:4e:1b:6d:db:88:88:68:3c:37:0a:23:18:aa:ed:
         6a:2d:fa:6f:f8:1a:e4:b7:33:54:69:ee:b3:72:82:6d:7c:98:
         b9:fe:6c:12:27:25:87:4b:02:0b:d4:af:4b:ec:73:12:5e:50:
         cc:1e:6a:ef:79:b4:0b:c2:3f:32:19:a3:b7:05:b1:c8:74:c3:
         66:15:78:27:c0:e9:8e:eb:49:0a:3b:6f:e1:aa:66:32:a9:8b:
         93:b0:65:53:5c:e6:8c:ba:f8:3a:e3:b5:1c:c9:73:6e:56:d4:
         aa:65:f6:45:c2:7b:c2:8a:77:06:1d:51:bd:0d:d1:2b:67:40:
         10:16:db:38:ec:bb:99:e2:c1:0a:27:d5:a1:7a:8e:c8:9b:01:
         c4:f0:75:0b:f0:ae:d7:c8:ca:90:45:34:07:c3:07:d6:7f:cf:
         e4:02:72:c5:95:12:80:cc:50:48:c3:5d:25:29:6e:0f:a5:f7:
         de:37:93:60:9d:62:1c:30:85:a8:c1:74:58:6c:12:bc:99:5f:
         e4:16:50:37:48:55:4a:64:ea:4e:8a:44:e8:61:8c:81:f8:5d:
         03:bf:46:64:1c:23:c1:c9:96:44:45:f2:5d:ef:a9:12:7d:42:
         4b:32:68:8f:a6:d6:92:f7:9b:32:ad:67:ae:6c:ab:0b:a8:78:
         f2:94:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:53 2025 by rpki-client