Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/753c116f-c989-3fe8-b045-a7f3746b1c89.roa
File:                     753c116f-c989-3fe8-b045-a7f3746b1c89.roa (raw, json)
Hash identifier:          dGsx2cUtxEgl0E8HOPuHQvpGhcnVQFRAJp5yzX+LNwk=
Subject key identifier:   AE:90:63:79:A4:C7:2F:65:90:5C:31:33:9D:EC:27:98:16:0A:C6:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B41E724A7E7AC0FFE13834280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/753c116f-c989-3fe8-b045-a7f3746b1c89.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1007:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:24:a7:e7:ac:0f:fe:13:83:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=807c5a67-06ea-4682-8cdf-a0f6f75b569c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:8d:5f:f1:b4:21:c3:2c:f0:7d:59:65:98:
                    d3:43:68:0a:4b:4f:76:15:84:eb:7c:d2:51:3b:49:
                    f1:b7:d3:c1:60:3d:a9:71:ea:db:be:9c:4d:c8:05:
                    ef:3e:94:7c:0a:72:20:64:b7:7b:d9:e3:1c:10:69:
                    e6:9e:59:89:04:87:ad:32:e7:b8:56:ec:dd:23:70:
                    1f:7a:12:4b:ee:26:48:53:68:ac:03:c4:5f:39:70:
                    b7:03:01:f1:88:8b:7d:d5:2c:7b:f8:b3:ea:cf:c6:
                    82:fc:99:82:f1:f4:d3:1f:21:ef:4c:c9:9e:ce:39:
                    77:95:35:21:0b:fb:83:6e:1c:8e:69:61:81:13:3f:
                    3f:77:2e:24:1a:ce:0e:cd:ef:0f:b4:4b:06:66:33:
                    4f:bf:80:b0:46:fe:0f:ec:29:1f:89:88:7a:80:a5:
                    88:22:37:38:eb:7f:44:3f:1f:d8:af:54:bb:54:f9:
                    ec:cf:d3:d6:46:6d:44:57:80:03:56:56:f8:7e:1e:
                    5f:54:90:6d:c2:a2:df:e4:5e:a9:e8:a4:84:20:36:
                    fb:6b:39:3d:6f:dc:f5:85:63:8a:f2:60:4c:62:10:
                    c0:1b:dc:39:26:4c:46:ba:a5:c0:7a:92:ca:54:55:
                    eb:93:76:eb:43:78:f5:6b:0f:06:e8:34:66:81:a4:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:63:79:A4:C7:2F:65:90:5C:31:33:9D:EC:27:98:16:0A:C6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/753c116f-c989-3fe8-b045-a7f3746b1c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:13:32:6d:f3:3c:df:49:b7:f8:77:36:23:23:54:cb:27:
         87:8c:4c:06:14:da:b1:bd:68:df:63:4f:77:f8:61:26:66:26:
         d1:a0:d6:1c:20:f2:88:4c:f6:55:d9:09:48:84:df:cc:28:1a:
         93:96:45:1f:8c:b9:7a:bf:90:04:6d:b6:65:1e:2c:5a:d6:f8:
         32:3e:75:bc:12:1a:88:bb:84:10:45:ec:e9:7f:34:89:54:8c:
         89:68:b0:1e:9c:9c:91:d8:07:88:0e:5d:07:09:65:39:dd:7b:
         be:7b:da:1b:65:ff:49:e1:bb:4a:d4:4b:77:2e:e8:c7:c0:93:
         30:0e:1e:cb:c7:56:4b:f8:cb:80:3a:c7:8f:6b:c5:f6:c1:e0:
         f4:1a:2a:c5:ef:d9:a1:fc:26:e7:72:e7:44:07:b5:4b:3f:c4:
         2f:92:6d:12:7b:c2:d5:7e:c3:e4:6d:47:48:e0:b6:b9:70:77:
         e0:62:f8:b1:27:f3:78:6d:28:59:e4:ae:26:18:87:2f:d3:b4:
         85:f9:88:d5:80:7b:9e:28:fa:25:d5:ad:b5:7a:ad:66:0e:b2:
         34:7c:a8:18:a9:dd:4b:7f:0a:24:b8:e0:5e:06:86:87:e5:6f:
         73:5b:2b:8d:ea:a2:8b:35:98:25:d4:9a:85:6b:d8:18:8a:7b:
         6c:d7:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:47 2025 by rpki-client