Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f8595f-4149-39d7-a3f9-7a13099ea00c.roa
File:                     85f8595f-4149-39d7-a3f9-7a13099ea00c.roa (raw, json)
Hash identifier:          9oBwaguIgF1oHBnwxmatLlL1ZoNvgkJ/bjCA7AX+FcE=
Subject key identifier:   69:C7:35:AC:34:F1:85:14:11:2A:13:84:38:58:CA:69:E5:E5:7F:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C372182C6CC72EDF378E900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f8595f-4149-39d7-a3f9-7a13099ea00c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b1c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:21:82:c6:cc:72:ed:f3:78:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=1d444ce2-68fe-485b-8055-b474089e6ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:bf:87:0b:09:8e:bf:cd:b9:e3:0f:b1:ad:
                    3b:63:72:62:8e:ef:ba:98:79:8f:74:bf:3c:95:37:
                    9f:0c:2f:df:88:53:ee:01:20:1f:93:19:e3:3e:62:
                    f9:bb:89:33:b9:f6:9a:85:21:6b:f1:b3:ab:33:6e:
                    e4:81:69:08:00:45:0e:81:bf:1d:5e:dc:a9:6b:e1:
                    b1:51:e2:e8:e5:5f:6a:92:a3:c7:c4:79:6c:d5:e5:
                    c7:be:96:c7:c4:77:3c:c0:a2:dc:7d:0d:7b:e6:c3:
                    bd:da:24:ac:c1:64:28:a0:be:aa:83:d2:84:71:45:
                    2b:de:78:9d:3b:98:a3:7c:a3:e0:cf:76:87:f2:14:
                    d7:ed:b2:d8:40:ee:54:f0:61:d7:82:0b:93:3f:e6:
                    1b:b5:8b:8f:54:8b:d6:e4:57:d5:f2:ef:7d:84:dd:
                    24:21:e3:4e:85:c3:94:91:a6:46:49:50:4a:dc:1f:
                    b8:a9:e0:77:4a:fc:87:1f:10:cb:f2:65:81:37:da:
                    1f:40:2c:76:77:68:50:c0:a2:4d:15:a8:dc:07:54:
                    fa:96:62:b5:67:59:00:a6:85:84:2d:45:92:8c:22:
                    bf:e4:30:dc:70:24:6e:c1:30:af:cc:0f:84:5a:87:
                    bf:2e:31:2f:f2:af:ef:ee:f2:db:8b:ac:13:87:58:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:35:AC:34:F1:85:14:11:2A:13:84:38:58:CA:69:E5:E5:7F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f8595f-4149-39d7-a3f9-7a13099ea00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:1d:22:a0:64:92:44:95:84:31:12:24:25:6d:5e:58:1f:
         27:bb:29:5d:11:76:61:f9:11:3f:09:6c:f6:25:56:32:43:e9:
         e1:a2:45:97:9c:3c:fa:4b:c0:c5:92:aa:c6:dc:31:c2:4d:02:
         f5:1d:d5:d7:ca:59:b9:ab:a6:75:b1:54:71:c8:08:53:12:16:
         a8:3e:67:59:8d:6e:47:09:ab:9e:c8:97:e2:86:fb:c6:bf:94:
         9f:9f:17:f0:a8:12:f2:fe:fc:c9:cd:ce:e7:da:6f:73:7b:d4:
         01:7a:6f:e3:e3:c8:dd:48:2d:da:b5:30:58:02:47:ef:f9:2a:
         41:8c:ee:6b:d7:cf:28:04:91:87:59:82:cd:f3:f9:04:46:52:
         80:e5:db:de:41:00:3c:be:b7:17:c8:b6:17:41:81:17:9c:0b:
         bd:1d:69:41:97:07:43:98:66:7d:69:84:30:77:09:e4:ee:85:
         fa:3a:80:9d:c5:fc:27:80:d8:82:de:8d:51:d6:1f:c9:21:a8:
         b5:8d:12:88:4d:21:52:15:6f:a0:bf:56:ac:ad:ad:ce:09:e9:
         42:98:80:a3:39:05:7b:cb:94:7c:a3:27:ad:5b:27:1a:e6:3e:
         70:a5:42:01:a2:0c:9e:20:a0:aa:5e:7e:4b:b6:f8:66:27:3a:
         d0:ee:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:32 2025 by rpki-client