Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b76857c-4233-38f3-94c6-887b0dfed354.roa
File:                     7b76857c-4233-38f3-94c6-887b0dfed354.roa (raw, json)
Hash identifier:          otEMaJQ11vJ28kUOGv4iIcnNkLQjS9+7XlEwSP82T3g=
Subject key identifier:   49:28:78:73:11:96:9E:F5:1E:47:99:7C:1B:52:52:A3:B7:D5:3C:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371FD45A13608F0326E680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b76857c-4233-38f3-94c6-887b0dfed354.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1f:d4:5a:13:60:8f:03:26:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=a432c767-1fd7-4451-a784-a076c1ef4ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:5d:71:f0:f9:67:44:bb:82:ed:ea:43:89:
                    ea:7f:dd:ce:c5:8b:4e:63:0e:6c:33:77:42:7e:14:
                    ad:b0:bc:11:a0:af:d1:42:68:20:ca:b6:71:07:ef:
                    25:96:f0:15:a8:e2:73:e5:e6:69:86:61:01:e0:b1:
                    d0:b8:22:45:45:1a:5c:23:9d:28:7f:00:a8:f2:18:
                    a6:64:f8:33:89:d3:86:5f:e3:cc:28:b1:3f:9f:8d:
                    ce:27:a0:79:34:ae:c0:d2:47:ba:54:30:ca:05:f8:
                    df:7f:c9:4b:48:60:c9:19:c2:55:df:38:82:70:0c:
                    19:18:41:26:47:d7:89:ef:5b:aa:7e:c4:94:ec:dc:
                    93:15:43:66:1b:c6:bd:b9:f7:67:f0:38:36:fe:a4:
                    23:1b:30:6a:f9:8d:26:7c:c1:7c:33:b6:d8:37:d3:
                    91:e3:dd:97:89:52:34:2e:71:b9:c4:d8:70:c5:0b:
                    d2:82:73:08:e3:5c:eb:64:bb:bf:a4:57:c8:1c:58:
                    b9:4f:e3:49:d9:34:e6:5e:44:ca:34:6f:4e:5b:86:
                    e0:dc:7f:ba:e4:94:fe:0e:21:0b:01:b4:a1:92:89:
                    ef:7e:6d:6b:91:b9:bf:ff:29:7a:59:c4:21:16:1f:
                    bb:78:a5:b8:cf:e8:ee:cb:59:cb:a8:ef:ff:c4:a8:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:28:78:73:11:96:9E:F5:1E:47:99:7C:1B:52:52:A3:B7:D5:3C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b76857c-4233-38f3-94c6-887b0dfed354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:68:ed:98:7c:6d:7f:e9:6c:74:64:3e:18:df:ff:45:bd:e8:
         f0:9d:2d:03:01:95:80:47:a6:6b:c2:1a:92:9b:2d:de:e8:6d:
         d5:b3:56:8c:88:30:5f:e1:3d:6d:9d:79:a9:00:86:b9:05:49:
         97:df:37:c4:26:e9:12:4f:80:e5:1a:fa:38:bd:43:27:3c:58:
         ac:44:bf:c1:42:ce:ca:3c:63:16:b7:3a:ab:9e:4f:34:dd:7b:
         8b:66:05:a3:56:ac:6f:ef:48:e6:76:d9:fb:0a:27:3f:23:40:
         a8:2e:05:72:bc:a0:cf:69:2d:c7:de:db:79:5a:fb:ea:6e:46:
         32:f8:91:50:3b:dd:f9:96:7a:23:92:0b:5d:2d:33:6d:ee:6e:
         00:e1:45:6a:b1:32:a8:0a:24:8e:36:89:a6:ae:c7:10:09:b9:
         65:07:45:83:ee:05:b9:c0:68:9c:a4:66:fe:79:1e:8f:57:cd:
         b8:80:e4:1a:49:87:cf:0b:80:4e:16:69:e6:4a:f4:a2:3f:fc:
         f7:a9:9c:91:17:4e:a7:5b:9c:ff:50:88:8f:9c:43:43:c0:97:
         4e:d4:4c:e2:ad:c2:e2:33:6d:47:b7:ba:e7:9f:76:d9:b8:fe:
         3e:d5:da:83:c7:c0:4c:cc:9f:45:67:49:e9:c1:64:c5:db:b1:
         fd:44:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:29 2025 by rpki-client