Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff9f0e9-05ad-33a8-b084-decd821ddbcd.roa
File:                     7ff9f0e9-05ad-33a8-b084-decd821ddbcd.roa (raw, json)
Hash identifier:          4ojFaLYe4S4CVTP61LUr8Aw0uwwGRCDTzdxl24t/52M=
Subject key identifier:   09:99:EF:9E:98:D0:F5:40:A0:27:9B:6D:60:EB:03:AC:F5:A8:65:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C99376EC2ED9F2AC331C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff9f0e9-05ad-33a8-b084-decd821ddbcd.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:99:37:6e:c2:ed:9f:2a:c3:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1fc63495-82a7-4b85-b55a-29805a509814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:cb:4c:c9:5e:43:88:c4:0b:67:12:50:cc:
                    4d:e8:25:53:12:82:f1:3d:21:95:f3:ed:10:70:94:
                    0a:55:ef:2a:53:3a:d8:a1:00:a2:4a:ce:e2:f4:5b:
                    31:fa:be:7f:b5:dc:b5:7c:e5:1d:ec:c9:89:e7:8c:
                    4f:25:bd:53:9b:b2:7e:e0:bf:79:08:c6:32:b3:66:
                    82:86:da:d0:5e:b2:6f:68:10:05:21:04:91:bc:53:
                    5b:53:a7:50:5e:96:09:96:f1:6b:fd:df:71:cb:52:
                    be:fc:00:b7:c5:5f:ca:88:c3:02:2a:06:c5:b8:5b:
                    75:04:e5:b5:bc:22:d7:c9:8c:b7:7b:4a:f6:d3:97:
                    68:ca:b7:6d:dd:2e:a4:c2:38:36:6f:59:df:02:a9:
                    7c:fd:bd:d9:7a:10:d5:8a:e4:07:4d:84:9b:39:8b:
                    88:17:77:a2:c2:f6:88:9f:cd:6a:8c:74:17:5f:83:
                    79:4a:7f:60:65:e2:d9:5a:ac:88:15:ba:e7:87:66:
                    1a:a6:ff:41:cf:9b:57:e5:5c:3d:af:7f:e8:8e:54:
                    26:4a:54:30:12:66:e3:63:5d:01:da:45:b1:8a:b3:
                    e5:42:f6:03:a5:4e:be:a8:e5:c6:aa:45:c4:20:a1:
                    77:47:ba:70:69:bc:90:45:da:ad:67:0f:52:78:67:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:EF:9E:98:D0:F5:40:A0:27:9B:6D:60:EB:03:AC:F5:A8:65:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff9f0e9-05ad-33a8-b084-decd821ddbcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:00:98:03:17:16:c8:5d:3b:13:d4:ce:9f:59:dd:9a:c8:09:
         ab:cd:13:ac:7e:ac:4d:29:3a:3c:68:9e:ee:b6:12:b2:ed:66:
         82:4a:51:93:35:9c:8d:20:8e:2b:99:ba:9a:2d:38:81:d2:2f:
         89:4f:d0:b0:b4:a8:6f:82:d1:8f:61:ef:aa:26:1e:b9:59:cb:
         bc:a1:45:af:c3:f1:0f:ef:1f:47:10:24:89:bc:07:06:0f:57:
         01:34:7d:62:f5:33:c0:53:03:46:19:57:92:06:44:db:ce:88:
         6e:88:29:fd:eb:c2:7f:12:8b:d5:a9:72:3f:94:07:f0:4a:69:
         5d:e0:3d:ba:4e:7d:6e:40:30:68:f9:7c:82:bd:19:50:49:86:
         a0:91:00:cd:e3:3e:c2:9a:95:cd:f1:17:ef:74:21:48:22:df:
         c4:50:34:1d:d9:50:a7:60:0c:15:63:e0:30:3e:a0:a0:35:0f:
         d1:61:20:dd:e0:57:b2:66:1c:33:82:e2:56:13:df:50:b0:7a:
         22:ee:54:ec:45:01:0c:a4:33:72:db:f3:58:a8:47:ef:5d:23:
         7d:de:b2:7c:0a:fa:32:b2:16:3b:6c:99:05:46:30:da:c2:8f:
         0c:d3:60:1a:67:e4:af:55:87:d6:cb:13:1a:d0:a2:c2:38:b2:
         a2:3b:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:04 2025 by rpki-client