Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa
File:                     70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa (raw, json)
Hash identifier:          bo9DVG6BJYmRaj5Jdju/QlmkT3zX8vWovV3W+OTvp7w=
Subject key identifier:   F4:AD:43:E6:57:E1:D0:74:B2:5B:3F:DC:F6:56:56:08:D8:83:E0:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C94825FC006161A0C5680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100b:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:94:82:5f:c0:06:16:1a:0c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=12c622f5-98f4-4530-b98c-219f961b05c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:87:ae:29:a9:ad:38:87:97:9a:6f:ac:c1:
                    5a:43:c6:f2:e0:f4:5b:3b:c3:0d:c9:fd:8b:e1:0f:
                    0a:67:8b:0c:c9:0f:19:4b:fc:ae:01:f7:e8:13:3c:
                    fd:f9:17:37:1f:49:64:0b:06:a0:26:05:ad:11:b5:
                    c9:42:f1:40:22:92:df:21:2e:6c:8b:3b:68:4b:0d:
                    e2:ee:fe:c3:f6:70:cb:69:a9:fa:69:66:6f:0a:31:
                    c2:86:e0:cd:27:ff:ef:8b:f5:04:8a:5b:35:c1:f2:
                    00:da:0d:e3:5f:16:b7:0e:62:e9:94:00:7b:a1:5c:
                    53:fa:39:53:dc:e3:07:c4:a4:cc:14:4d:2d:80:e7:
                    a4:9d:ba:ce:c1:dc:a4:c7:88:b1:c4:bf:cf:2e:33:
                    d2:70:d6:f4:80:d9:41:6d:27:85:d1:1a:a2:21:3e:
                    f7:64:ad:8f:2a:0b:63:c5:e0:d0:f4:bc:c6:ad:5a:
                    04:42:6c:ce:e5:77:ba:cb:48:fc:0e:32:8d:24:d0:
                    73:f9:d4:3e:f9:05:9c:09:2a:1c:3d:22:f1:a3:a8:
                    49:d6:89:e9:0e:a9:02:a3:90:1e:1c:56:28:f4:cf:
                    13:8b:40:3a:40:e1:8e:df:19:36:c9:c6:e3:8d:70:
                    60:83:cd:ee:ea:03:b1:ee:74:02:21:2c:c2:34:f7:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:43:E6:57:E1:D0:74:B2:5B:3F:DC:F6:56:56:08:D8:83:E0:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70baba91-6bfb-3157-a5e7-d6c80bd7863a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:19:1b:16:33:ee:5c:be:c0:d0:6d:18:52:63:58:27:99:ea:
         02:7c:e7:c0:50:4a:03:06:3c:12:da:d4:29:7e:31:82:14:5a:
         a8:fc:ae:f5:3b:b1:4b:82:9b:6e:9b:e9:12:51:1d:7d:ad:7a:
         a4:bb:00:bd:d7:42:46:70:fe:ab:15:bb:0c:95:a3:72:81:a1:
         47:be:3d:98:22:90:f4:08:8b:4c:5a:ff:7d:1c:6c:59:37:42:
         5a:d1:3f:93:32:7b:c9:33:b6:6a:27:19:e3:bf:c8:b7:1c:d7:
         aa:0b:7e:02:6d:47:1d:22:59:57:a4:b0:6a:2d:d1:7b:16:ce:
         ab:19:a9:44:23:11:7e:f5:10:ca:89:79:60:fd:be:cf:88:b3:
         5d:3d:10:e7:0c:08:dd:41:74:69:9b:2e:6b:20:af:67:9b:5e:
         ed:ce:cd:56:ab:89:5c:b5:3d:28:4b:b3:d3:5a:18:7e:86:f3:
         b2:2d:a7:2c:b6:bd:0e:53:2f:af:55:78:04:6c:58:17:4f:33:
         1e:6f:8f:e1:44:52:6b:e8:38:91:c8:ca:04:2c:b7:d3:56:67:
         08:cf:c7:4c:fa:57:c2:ae:49:75:32:25:a8:b6:06:4e:4e:a6:
         0e:25:39:91:06:a4:de:6e:33:f2:91:94:55:c2:68:5c:99:b8:
         e9:38:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:27 2025 by rpki-client