Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ce6a9af-94ac-3dad-b46e-2873d757e877.roa
File:                     7ce6a9af-94ac-3dad-b46e-2873d757e877.roa (raw, json)
Hash identifier:          MrticrLI1npOjVMAmzcEhr9+w/TAgiWJE4g9NwEB4Cc=
Subject key identifier:   0C:30:D8:90:F9:A7:0B:F9:73:48:F4:8D:FC:3E:FF:9A:72:04:4C:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B76F237FD0CDB910091797000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ce6a9af-94ac-3dad-b46e-2873d757e877.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        2600:100f:b240::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:37:fd:0c:db:91:00:91:79:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=b83922be-eaea-4063-bc34-f7b5d4182e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:a1:23:28:d9:75:73:7f:b6:37:d5:07:e9:
                    db:3e:aa:52:8e:51:0b:5b:9d:6a:16:5e:8c:08:1a:
                    ac:f4:73:e9:a6:63:9b:07:43:95:f8:4f:07:b0:94:
                    ba:5e:62:2c:2e:bf:09:8c:72:1a:2f:5f:d9:77:90:
                    32:d8:08:18:aa:b7:d8:35:9f:cc:d2:59:c2:06:7a:
                    58:91:5f:17:9c:5e:99:04:fb:2c:9e:6c:ae:6c:46:
                    50:9c:9c:7f:46:26:10:4d:d5:ca:ea:36:1b:75:f7:
                    61:15:4f:45:82:1b:35:21:c8:79:55:29:d5:ee:99:
                    1d:44:d2:df:46:80:5d:df:5f:82:55:74:51:8c:45:
                    fd:2b:fd:2a:7e:48:e8:c7:45:e0:ec:da:c0:b4:74:
                    f6:2f:8a:3b:fd:af:5b:56:65:18:bc:30:bf:18:0a:
                    05:05:d2:7f:34:50:56:ab:1a:af:fb:70:93:4f:8d:
                    70:16:49:75:86:a2:41:27:e3:d5:a6:50:28:40:61:
                    f1:05:e9:ba:5f:05:c4:f3:79:08:60:08:88:0a:a1:
                    46:9e:38:39:92:64:cf:cd:f8:1d:15:cd:49:fb:a6:
                    66:b3:5b:46:6f:39:f8:33:9d:24:22:a1:15:27:2f:
                    a7:a6:e6:3c:8f:22:89:98:f5:13:42:65:49:73:b8:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:D8:90:F9:A7:0B:F9:73:48:F4:8D:FC:3E:FF:9A:72:04:4C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ce6a9af-94ac-3dad-b46e-2873d757e877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b240::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:93:f4:47:1a:dc:73:df:d8:06:39:d6:57:4a:c1:c5:4c:
         a0:3b:42:2e:36:8a:76:c2:c4:a3:2a:1f:00:4f:b7:aa:89:27:
         0e:e9:d1:fb:26:51:38:37:d7:6d:51:20:20:08:5c:a4:db:55:
         f2:74:85:b8:12:a7:aa:cd:5b:0b:79:80:5f:4e:75:d2:5e:d7:
         ea:4b:58:ce:e7:a6:10:48:ab:cc:74:e2:fb:7d:bf:fb:b6:de:
         47:1b:1f:3f:db:00:a2:16:40:5a:2a:81:4c:fd:36:2d:bf:a6:
         1d:af:ee:de:ac:10:ae:6d:5e:f0:0c:0e:60:3d:c9:f8:03:ca:
         a7:c3:35:e7:cd:a8:d0:16:de:84:1f:09:71:1a:ad:3b:f8:e6:
         ad:aa:14:8e:58:9f:de:b7:37:de:b6:96:a4:14:04:4d:76:7e:
         a1:6e:78:48:33:1f:33:80:1f:0b:78:19:a4:aa:ac:cc:fa:a9:
         fc:21:b7:91:d7:88:7f:68:99:ed:c6:5a:15:a0:e1:9b:80:4c:
         96:52:3f:4d:ec:42:95:fc:c6:25:8e:58:40:d0:f2:4e:1a:cc:
         81:6e:13:16:46:65:69:84:b2:74:94:3c:49:a5:95:84:1d:93:
         29:35:9d:97:c2:b4:a8:98:6a:62:a3:97:02:ad:f9:4c:93:d6:
         4b:38:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:47 2025 by rpki-client