Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8240e5e6-19fc-3202-8913-b2d70084fdf1.roa
File:                     8240e5e6-19fc-3202-8913-b2d70084fdf1.roa (raw, json)
Hash identifier:          U+Spgb7LjyjsiUun2GI2GJdJTBSedLn1JWLHbxb/ixk=
Subject key identifier:   CA:1F:74:24:7F:28:9B:2B:37:B0:5E:27:4B:0E:12:FF:AE:F7:FA:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20894072385C15F101EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8240e5e6-19fc-3202-8913-b2d70084fdf1.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1004:a078::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:08:94:07:23:85:c1:5f:10:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=5de3e66f-ce78-453d-a974-d09ca6a2c3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:02:64:e5:18:85:0f:80:63:32:56:0e:92:
                    f3:42:db:87:a5:d5:2c:15:61:c0:f1:30:f0:74:68:
                    46:5a:de:e3:9e:fb:3c:48:e1:5e:66:c7:ac:1d:c4:
                    56:9f:15:d3:7f:96:94:34:2e:8a:66:53:37:de:81:
                    97:9f:ec:22:91:8e:3a:b7:a9:e0:06:62:88:d6:9c:
                    aa:87:c0:23:e4:fc:8a:81:85:c9:7b:0a:9a:de:72:
                    74:47:88:69:63:2a:e7:96:e9:de:63:a1:a5:66:6f:
                    34:50:87:7d:71:04:31:9d:c7:dc:98:cc:b0:42:38:
                    36:f6:32:cc:75:e1:d9:2f:72:3d:95:9c:28:bc:9e:
                    66:b6:75:c4:7c:22:e4:d5:2c:fd:f3:2f:81:e1:56:
                    1c:8a:33:ce:7b:a1:a5:64:93:51:25:11:e9:15:a8:
                    00:33:de:b8:59:64:eb:b6:6e:a2:7a:6c:71:aa:98:
                    a1:1f:9e:52:90:c9:54:f7:3c:79:5e:83:f0:51:de:
                    9d:cc:09:9d:7c:a6:82:7c:7b:5e:6d:84:13:29:4c:
                    9f:71:ad:cf:cc:35:12:30:16:2e:df:e9:2d:1e:e0:
                    45:08:08:c0:d5:b2:d8:e9:35:fd:38:83:d3:52:7b:
                    cd:6f:7a:49:96:aa:ed:f9:f0:d1:7f:42:9a:3e:ce:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:74:24:7F:28:9B:2B:37:B0:5E:27:4B:0E:12:FF:AE:F7:FA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8240e5e6-19fc-3202-8913-b2d70084fdf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a078::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:50:e0:89:58:8a:92:95:63:9b:02:b4:69:ac:22:55:a1:
         4f:6b:50:fe:4c:52:5f:fe:d6:36:01:99:a6:8a:06:10:e6:44:
         a0:e4:07:27:5e:b3:a4:0e:20:42:ad:97:a7:8f:66:e7:5d:c4:
         2d:cb:7d:f3:08:d0:b3:6b:1f:dc:76:3c:7d:cd:7a:94:93:a3:
         49:d1:d6:9a:2a:fe:d8:e9:32:00:68:6a:d4:5f:8d:32:1f:21:
         e7:14:53:12:1b:be:52:7d:c4:fe:2c:1b:1e:56:c5:bb:c3:1c:
         78:81:c9:f0:b3:b2:21:bb:69:b7:d1:16:2e:e4:b5:bb:4e:ec:
         c9:1c:89:e3:4d:56:2c:16:88:bf:24:50:e9:6c:b3:2b:2f:02:
         28:fe:7c:3a:b8:4a:d9:45:6a:e7:62:c1:86:95:5d:e0:4c:db:
         ea:e6:64:7b:ea:11:17:26:fb:81:71:67:a2:b8:3f:22:e0:c5:
         05:19:ea:0d:85:66:86:5a:fa:6b:50:9a:d6:d4:df:7f:9a:1f:
         a4:4b:ce:65:eb:91:ba:86:4b:cc:a3:8d:f0:6e:d5:4a:9f:35:
         be:05:ab:6b:e1:66:17:b7:12:de:7f:8a:11:45:2e:35:5d:87:
         7c:8f:54:61:2f:c0:99:e4:2a:94:e5:c8:e0:5a:3d:fc:45:40:
         7c:cd:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:53:59 2025 by rpki-client