Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa
File:                     83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa (raw, json)
Hash identifier:          CYgnhbmljowubE/WgBbp6oklJ/T2mBZO+1NQbe1Llmw=
Subject key identifier:   59:CB:D9:39:1E:D4:15:D0:90:7E:A8:38:0D:86:74:C5:95:36:5B:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36CCB5C5E74777DA63BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        2600:4040:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:cc:b5:c5:e7:47:77:da:63:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=fb1aab3e-ad45-4ee6-9678-1bf6061cf990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:2c:f8:26:1d:c0:51:c8:77:9a:00:fc:65:
                    10:9a:d0:c2:97:01:e4:01:6f:a6:7c:f8:14:1e:61:
                    e2:98:f7:1e:a7:6b:58:2c:6e:bd:e6:64:40:bb:12:
                    75:d7:10:44:c4:9d:e9:d8:70:78:ec:b6:c4:00:eb:
                    6d:a1:6d:4a:0a:cc:be:9e:b9:4f:01:ab:19:b3:ca:
                    18:f7:dc:10:c7:36:99:49:df:73:72:00:71:03:71:
                    48:15:b0:a3:c8:32:08:a9:ca:bf:86:15:eb:b6:98:
                    47:61:83:0f:ec:d6:14:e8:cd:f5:e6:92:c4:e9:a8:
                    5a:8c:8c:9c:22:59:a6:cd:95:b8:ac:d3:3a:ba:df:
                    ce:eb:82:3d:a8:e4:48:5b:3d:53:af:09:80:d3:3e:
                    01:e7:c0:76:9d:73:39:20:f8:84:14:a7:a0:e8:fd:
                    d2:bd:3b:fa:7a:40:58:fd:1d:53:ed:44:8b:f5:b1:
                    ee:9d:4a:bb:35:82:71:48:b8:b0:de:59:a2:75:86:
                    0d:39:d3:23:80:70:f6:c0:b0:17:aa:c8:d9:a3:38:
                    cc:89:33:aa:38:e7:ac:f2:b5:db:ba:90:ef:11:a5:
                    0c:53:66:94:2d:9e:a6:74:4d:d4:49:a9:fd:7a:cd:
                    fe:24:4b:9f:12:6e:3f:9b:fe:02:4f:5c:d7:20:47:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:D9:39:1E:D4:15:D0:90:7E:A8:38:0D:86:74:C5:95:36:5B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:af:21:d8:43:b4:91:0d:26:02:55:ee:3b:33:4c:03:2e:
         a2:5c:61:26:29:b5:48:60:fe:8f:08:ae:bf:d3:de:e7:8b:42:
         db:34:23:33:53:40:79:40:09:9a:6a:5f:84:9b:1b:15:b6:9c:
         92:a6:c7:8f:fa:c2:a3:91:0f:97:7b:6f:e2:e7:29:a9:9a:6f:
         d9:f6:18:e3:50:91:bc:34:16:13:97:54:a8:74:88:34:7e:ba:
         c1:09:50:9b:7d:18:97:e9:25:a3:cb:99:f3:9d:2e:de:17:b8:
         02:8f:68:89:49:44:69:67:00:e7:01:c1:9c:29:c7:b3:de:29:
         70:f3:47:7e:74:37:28:fc:e6:90:8d:fe:5d:50:19:e2:36:61:
         97:a6:cb:09:d7:e4:36:11:9a:02:a1:99:a4:4d:f1:c8:e7:e1:
         eb:8a:b3:9b:3b:30:8c:0f:53:2c:b2:93:bf:5e:53:38:c1:c4:
         61:83:39:b3:2c:af:51:a2:44:b7:e2:d5:36:09:ac:08:2f:46:
         62:1d:a6:d2:f7:74:ff:de:09:57:ba:6e:0f:56:ff:21:1a:ea:
         ec:49:31:dd:84:d5:bb:2c:d0:c8:7c:4c:f1:66:cc:8f:e0:7a:
         63:8e:72:4e:18:fd:b5:40:e0:26:c3:c6:e8:6e:3b:31:b9:73:
         43:89:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:49 2025 by rpki-client