Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72112aa7-c84b-3ec0-9b18-2b8bbf0bf60e.roa
File:                     72112aa7-c84b-3ec0-9b18-2b8bbf0bf60e.roa (raw, json)
Hash identifier:          2/8VFmfTqpqLimeVy0TsvocuQ1xlsoTJCV2z57MKnD0=
Subject key identifier:   AC:D7:A5:26:65:8D:0D:EF:C4:50:C7:41:CA:4E:5F:6E:76:32:3F:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371FF938CB6EB985956B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72112aa7-c84b-3ec0-9b18-2b8bbf0bf60e.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b0e2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1f:f9:38:cb:6e:b9:85:95:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8ce4a1c6-760b-4796-8712-55b55b5cd49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:ae:65:43:a3:b9:be:7d:59:3d:68:2b:e2:
                    6c:ee:15:42:e7:bf:21:52:25:24:f1:bf:c3:41:ec:
                    51:75:46:d0:d6:ed:be:30:17:a6:40:f2:27:51:69:
                    b9:04:e1:36:9c:77:0f:ec:f8:d2:b1:9a:7a:7f:de:
                    45:ea:76:20:22:e8:48:57:37:95:dd:39:9f:d5:bf:
                    52:ce:5f:62:f6:d9:87:ca:b4:43:c3:5c:a0:50:fa:
                    1e:45:f8:90:0a:7d:9d:10:55:66:82:40:44:c9:46:
                    bc:1a:bc:f6:da:eb:37:ce:a3:df:04:33:35:08:9e:
                    cb:71:bf:40:08:51:f7:47:10:22:52:bf:bc:38:1e:
                    aa:67:27:0e:9d:87:86:c3:8e:6a:21:19:5b:dd:2b:
                    c2:6d:a3:8a:1b:1f:b6:26:6e:7c:eb:79:a2:1a:5d:
                    be:71:b8:c8:53:c5:b2:9d:3a:f7:41:db:ee:50:64:
                    28:42:3a:ca:b3:08:2a:f4:15:b7:2f:46:f0:85:91:
                    83:af:e4:2c:61:75:78:ec:ab:47:f9:d0:ab:38:96:
                    89:2e:22:c5:5c:c7:c1:dc:23:9e:dc:07:bd:a1:32:
                    56:08:ec:6c:64:61:b2:28:eb:ef:99:46:21:fd:7e:
                    1c:80:ac:7a:b4:c1:4f:af:61:52:b7:72:ba:16:02:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D7:A5:26:65:8D:0D:EF:C4:50:C7:41:CA:4E:5F:6E:76:32:3F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72112aa7-c84b-3ec0-9b18-2b8bbf0bf60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0e2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:51:7d:3f:20:66:53:6b:e2:9b:a5:16:d7:ae:1c:2c:45:
         7c:88:40:bd:54:f0:cb:aa:ef:38:2d:4a:54:2c:6d:8e:c4:2f:
         ed:e3:c2:48:04:ab:99:20:cd:5b:b2:ee:72:69:39:9d:03:d1:
         ec:b8:c7:2c:f5:d4:2d:97:ca:35:36:69:1e:10:97:75:2f:fe:
         b9:ba:c5:59:80:dc:43:ee:00:78:0e:c7:45:58:85:a8:3b:35:
         3a:4e:2c:15:68:02:91:a8:2b:2a:a8:f6:cf:89:2c:57:85:b2:
         14:65:fe:37:17:15:fb:8e:61:e9:7a:29:05:1f:c0:99:91:e5:
         25:58:45:e8:66:78:e8:47:68:de:d4:36:c9:59:fb:ce:6e:d5:
         47:d8:0e:a7:59:d0:91:22:7e:f0:36:d8:1a:01:4a:67:c3:f9:
         41:bf:f8:43:9e:bf:9d:c1:e5:47:d5:9c:26:ac:d2:83:9c:bd:
         6e:b0:e3:a7:07:2d:cb:5a:24:13:43:3c:ca:24:5a:e9:9a:bb:
         1b:18:20:4d:e0:7a:95:a8:ab:4c:3d:f6:7d:dd:e6:4e:fb:2b:
         d5:a4:91:e3:a2:27:0e:7e:b9:5b:9e:1c:fb:60:e1:fc:07:03:
         86:78:c3:81:c2:45:30:09:c3:ff:ad:59:68:97:9b:77:f7:3f:
         5f:4b:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:48 2025 by rpki-client