Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c1cfe05-8026-32cf-8d6b-eff10e6212fb.roa
File:                     7c1cfe05-8026-32cf-8d6b-eff10e6212fb.roa (raw, json)
Hash identifier:          i7MqMqupTaBERkxiB4B6j/KzKWJVZxFVgN0wPSINrcw=
Subject key identifier:   21:E0:F2:EB:A5:0E:C1:DA:1D:B2:90:8A:5D:B4:F3:F0:27:30:48:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1EA3D55C079E6C0FFBBB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c1cfe05-8026-32cf-8d6b-eff10e6212fb.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1014:a130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ea:3d:55:c0:79:e6:c0:ff:bb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=21894954-8ae5-4e1f-8839-c6ca4c3ed54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:b6:f3:e7:82:12:cb:b9:fb:f1:5f:c9:ae:
                    38:47:8a:5f:20:95:4b:2b:1a:36:94:54:b9:82:d1:
                    d5:f3:56:45:06:04:29:df:1c:4c:50:47:9c:01:fd:
                    c6:c4:cf:87:c2:b2:15:b2:f2:db:91:2b:dd:ec:4b:
                    b9:68:c3:2e:5e:b6:d7:6d:fc:c5:00:2b:56:68:4e:
                    d5:e8:78:fe:10:cb:32:d4:0f:89:87:eb:0c:90:a4:
                    46:94:87:26:a7:21:ee:7e:56:dc:3f:b3:af:7b:01:
                    50:cb:e2:01:b5:25:10:50:b8:60:d5:52:1b:af:57:
                    dc:6d:b7:f5:63:6b:c5:0c:9d:ba:01:73:08:fe:fe:
                    a5:bf:9f:0e:48:fa:4c:4c:22:be:48:f2:14:21:0e:
                    82:ef:b9:f0:29:be:0c:79:3d:3e:32:4c:58:d7:35:
                    b9:0b:85:98:eb:0f:04:7b:72:15:a5:27:be:9a:8b:
                    dc:5b:93:2a:b7:46:44:4f:22:fe:3d:35:09:21:cb:
                    54:ba:a8:43:5c:a1:94:66:50:30:f3:83:3b:52:10:
                    fd:32:71:44:76:03:ad:eb:51:c8:04:47:bb:f2:c8:
                    38:0b:fb:93:49:d5:aa:01:0c:d5:17:d0:42:ff:4a:
                    af:bf:35:91:6a:01:07:75:94:23:70:66:80:2c:56:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:F2:EB:A5:0E:C1:DA:1D:B2:90:8A:5D:B4:F3:F0:27:30:48:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c1cfe05-8026-32cf-8d6b-eff10e6212fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a130::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:3e:ca:51:87:ec:2f:23:b5:30:d6:1c:01:4a:e5:cb:11:
         1c:8c:58:68:48:5a:91:2c:73:37:42:72:34:6c:97:f4:32:45:
         32:85:74:92:aa:73:2c:7c:1a:42:38:e8:f5:c1:cb:e6:95:a7:
         b5:24:dc:f4:d7:62:48:f1:1d:a9:58:89:fd:7e:d0:3d:66:98:
         23:ff:5e:60:f3:f9:8d:84:87:af:4a:af:d9:ac:5e:e7:31:b7:
         63:37:4b:2c:f4:1e:d1:5a:9e:8f:a3:eb:4c:5d:8b:34:55:26:
         d3:63:1d:8f:cb:c5:0b:ed:52:e4:99:fc:3e:6c:7d:9e:43:00:
         9c:61:6c:90:73:55:03:46:c3:9e:3e:fb:1b:2b:bd:40:fd:72:
         37:35:e8:51:10:57:e8:9a:8e:0f:f1:38:95:ef:9a:67:ef:13:
         79:f6:6c:24:75:3f:f7:31:cf:31:9e:25:4b:bd:40:bc:29:d4:
         83:42:17:16:9b:0b:35:40:ac:b3:c4:07:09:d0:92:96:48:2c:
         29:95:89:49:d9:d9:e1:6c:26:63:99:38:e3:c6:d4:6b:24:0b:
         40:ec:17:85:7f:9d:32:b8:ea:95:0b:81:2e:ad:1d:50:a3:85:
         94:99:ba:f8:6f:be:57:bf:af:40:82:fb:21:93:d9:25:ab:19:
         64:83:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:38 2025 by rpki-client