Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cdf780-898f-3f26-900d-28d5f1dff9f3.roa
File:                     88cdf780-898f-3f26-900d-28d5f1dff9f3.roa (raw, json)
Hash identifier:          mEnoAmYaDFheuhD+Ndh18A1aFA3oo54LIZi9jyMprRc=
Subject key identifier:   2E:2A:03:C5:E2:17:6F:16:C1:E5:10:8B:53:BE:B7:8C:EE:72:C0:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A118A445E3F2AAB15688070
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cdf780-898f-3f26-900d-28d5f1dff9f3.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1017:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:8a:44:5e:3f:2a:ab:15:68:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=aa19119e-22d0-45d5-92d3-4a253b625c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:8e:c9:ae:76:47:ad:12:6b:61:b5:f4:72:
                    68:b4:d5:9c:47:85:53:7d:37:36:ea:33:06:7e:7a:
                    6d:16:44:5c:69:c4:d7:ea:db:ec:de:22:1e:15:95:
                    ab:c5:0f:60:05:74:97:15:43:f3:91:aa:f5:8a:a7:
                    f6:6d:8a:41:83:a1:cc:c6:97:02:8f:6c:9e:24:b0:
                    7d:97:b0:ef:90:4e:f3:97:81:95:2f:7d:7c:b1:bb:
                    4d:e7:d4:11:a3:7b:97:31:bb:7a:d8:97:4b:18:fb:
                    b4:38:74:84:9a:eb:22:03:f0:ca:2e:84:07:8c:00:
                    4d:5c:2a:42:28:e0:23:d5:23:71:0f:ab:98:bd:c7:
                    d3:ed:94:d8:be:03:e5:ce:da:c8:0c:f4:a2:e0:15:
                    39:d5:00:7c:39:9e:b3:30:3b:27:90:d4:c9:fa:ae:
                    17:c5:60:6f:2c:61:76:f2:c0:45:4a:43:d0:e1:e1:
                    94:72:6b:70:fb:00:cf:3c:e7:c2:6d:e2:38:8c:a7:
                    b4:77:04:59:1a:c1:e0:cc:59:32:0a:d1:87:a5:a2:
                    06:5f:5b:3d:5d:3b:95:50:54:5d:8a:3a:9e:e5:c0:
                    bf:46:28:14:96:db:24:79:0f:c2:44:b3:82:2b:80:
                    56:96:b9:48:3d:a6:1c:ef:9f:5f:aa:12:16:06:7f:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2A:03:C5:E2:17:6F:16:C1:E5:10:8B:53:BE:B7:8C:EE:72:C0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cdf780-898f-3f26-900d-28d5f1dff9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:d8:fe:7e:39:e1:9a:0b:ed:c4:bb:96:fe:ce:f4:a3:31:
         28:33:d9:11:d9:04:d3:2c:2f:4e:a8:b7:a2:24:9c:0a:90:a0:
         b4:aa:78:1d:a8:41:1b:c9:9e:17:f9:b8:72:4c:a4:98:59:1d:
         c2:ca:a4:34:13:d1:ee:92:eb:42:fe:3c:d5:3e:c2:e7:01:7c:
         f1:02:9e:b1:a3:36:7c:85:c1:fe:0b:0f:74:38:f3:f9:5a:e2:
         dc:50:65:83:ca:2a:50:e2:98:4a:89:a6:cb:e8:96:41:83:77:
         11:95:bd:53:ee:98:b0:13:36:fc:54:95:ce:f5:d0:81:98:a2:
         89:01:6c:80:d8:e3:86:58:cf:8d:11:2b:99:f2:41:b9:df:a4:
         27:aa:a0:e0:7e:54:15:97:b1:a9:26:5f:0b:58:ab:3a:43:68:
         33:8d:0b:d5:47:47:9e:2e:e0:96:e4:f0:e2:24:ce:67:27:77:
         4d:be:a6:18:59:eb:52:80:3e:da:9c:3a:16:8e:7c:b7:9f:46:
         43:cb:e9:31:62:7f:9c:6f:58:db:51:98:f6:af:13:5a:e6:6b:
         cf:27:33:ff:59:36:a0:a6:14:96:96:e0:79:51:19:07:e3:5d:
         b3:bb:5f:b2:5c:47:2c:62:76:2f:cd:06:6d:09:16:0b:a3:87:
         9d:a6:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:32 2025 by rpki-client