Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa
File:                     8abc1694-b93c-35df-9193-df304492f416.roa (raw, json)
Hash identifier:          02mr6OtZyIpBMY0NS8Q+HP0EIU4wJ5aiCV3UsBNXCTo=
Subject key identifier:   6E:51:34:A6:CD:8E:EE:72:0A:DB:8E:FC:D8:A5:5D:1B:F1:DF:65:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C90C47CF4BE6176C67480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:b1c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:90:c4:7c:f4:be:61:76:c6:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0014fcc8-44b5-48cd-b5da-c99fc0682742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:66:1d:d3:fe:05:03:02:00:93:25:c6:1b:
                    fb:bc:3b:76:87:05:cf:a5:cd:a0:1b:f1:f6:eb:22:
                    d5:00:f2:72:8f:12:00:81:50:5a:e1:76:0b:ea:4e:
                    af:33:d1:af:6e:52:bb:de:9f:04:b8:4a:e1:eb:fb:
                    d0:5c:58:d9:d1:ac:ca:e3:51:e8:4c:b9:0e:79:61:
                    8c:f0:26:61:2d:c6:ef:54:c0:a0:2f:19:e6:39:8a:
                    56:0f:9e:80:11:60:aa:3a:9a:e2:6f:b2:48:ec:21:
                    43:63:4b:f5:e8:39:b7:05:be:5a:1d:75:0c:6c:dd:
                    15:6b:d8:a9:7a:9e:b6:8c:8f:76:8f:57:72:5c:95:
                    64:55:8a:07:ba:83:99:b9:d7:01:c8:3b:85:94:85:
                    07:d9:c2:16:26:83:3a:02:2e:17:fb:26:5d:f9:76:
                    41:9e:1b:e4:c9:0c:b5:cf:bf:52:ef:98:3f:37:9d:
                    08:7b:ac:23:eb:f7:38:28:a2:64:d9:bf:91:cc:bd:
                    36:60:34:e5:5d:4e:87:55:eb:43:13:8d:d6:a1:90:
                    76:ea:6f:2b:a8:0e:49:4d:56:19:bf:9a:ea:98:c7:
                    3e:cf:05:92:a9:51:fe:3d:ee:87:77:17:59:ad:fd:
                    59:ea:68:91:fb:1b:1f:d4:4c:7d:f1:69:6f:db:df:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:34:A6:CD:8E:EE:72:0A:DB:8E:FC:D8:A5:5D:1B:F1:DF:65:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:66:ac:a5:f1:93:98:78:ad:f7:1a:62:4b:70:4c:2e:0f:
         ba:db:f5:59:9f:ae:dd:e7:a8:b7:18:75:ac:05:b2:55:a3:0d:
         0c:83:13:d2:3f:06:35:8f:4b:11:65:cb:7f:b8:dc:b9:78:b9:
         55:42:58:3f:19:bf:71:42:59:b7:1b:c2:7c:47:92:81:b0:28:
         95:09:47:bb:b4:c6:3d:1a:25:4c:05:9c:79:55:e8:14:f0:16:
         44:40:64:59:c3:ce:d0:8b:21:f8:90:32:7c:5a:39:b7:58:dd:
         63:05:df:16:6b:8a:a2:0e:0e:43:f3:09:4a:ba:fe:dd:9f:32:
         86:b7:29:a2:b8:6b:2c:b9:68:80:da:3c:5e:7a:ee:56:43:a8:
         35:60:8a:d2:cb:56:7a:da:08:50:94:83:40:01:e1:40:4d:22:
         a2:4f:ff:f4:37:3e:97:b0:51:e6:1a:48:85:b8:d8:e0:8e:e2:
         dd:65:b8:63:09:94:da:4a:04:e2:bf:8a:80:61:83:2d:17:81:
         b1:29:bc:6e:52:e4:92:fc:f9:65:3b:7a:7c:fa:1f:8a:28:e0:
         8a:df:73:b0:31:f1:2b:7e:d3:21:65:e7:9d:ac:61:9a:53:b6:
         a1:11:9b:ed:13:ac:12:5b:b6:d7:b4:4a:03:8f:0f:e2:23:d9:
         ed:50:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:10 2025 by rpki-client