Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5c6363-1141-3b6a-b5b4-ca6931ad783d.roa
File:                     8e5c6363-1141-3b6a-b5b4-ca6931ad783d.roa (raw, json)
Hash identifier:          KOQpGeRY3Wkvv8bbRjlZ3/fTKi2/OsnVS1F9pg8qTMU=
Subject key identifier:   85:89:EC:6A:9C:C6:E6:0A:86:2D:C3:2C:E8:97:7E:1E:DD:9A:98:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8CFAFD642C0652091300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5c6363-1141-3b6a-b5b4-ca6931ad783d.roa
Signing time:             Wed 01 Oct 2025 14:11:15 +0000
ROA not before:           Wed 01 Oct 2025 14:11:15 +0000
ROA not after:            Tue 30 Dec 2025 15:11:15 +0000
asID:                     6167
IP address blocks:        2600:1001:b058::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8c:fa:fd:64:2c:06:52:09:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:15 2025 GMT
            Not After : Dec 30 15:11:15 2025 GMT
        Subject: CN=5491a82d-1d7a-41eb-b5f9-12450563bfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:31:4a:ad:81:fa:fb:00:91:f9:a1:b7:17:
                    08:00:83:01:32:d4:59:3c:d7:b7:c6:eb:b6:03:1a:
                    73:1d:3d:ca:1b:d1:76:f6:90:60:4d:f4:46:a4:b2:
                    3c:a1:70:c9:03:34:1b:d6:c8:c0:be:d7:9c:7f:ca:
                    8e:67:4d:eb:16:51:47:9e:e1:28:ef:a8:4f:74:6a:
                    3f:45:17:3e:46:00:e5:6c:a7:fe:40:42:23:40:37:
                    94:00:18:1c:36:ee:19:56:8b:b0:ee:e1:77:32:e3:
                    1a:34:2f:cd:03:8b:04:e2:09:ae:41:aa:ca:0b:dc:
                    6b:3a:b4:54:a1:dc:dd:59:2e:1f:65:76:83:1a:20:
                    7d:6a:f2:f4:f6:11:00:37:ec:e7:fd:c3:a3:da:c4:
                    34:a9:63:a6:35:09:9c:98:55:e2:20:3c:2b:c5:6e:
                    cd:d5:1a:6a:67:46:ec:8b:cd:e8:d8:1b:71:f0:cb:
                    24:10:63:a3:fa:60:96:56:a9:17:5d:24:7c:75:77:
                    0f:72:e2:5b:66:f1:bc:20:99:e1:d7:d5:44:3d:7b:
                    c7:44:8d:31:8c:6e:93:d8:a7:ee:0f:c4:42:82:0a:
                    ff:5f:44:23:6d:f1:d4:ed:6b:16:3b:6d:67:40:a8:
                    0e:e6:e1:21:96:63:40:fe:41:23:0a:e2:ec:d1:79:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:EC:6A:9C:C6:E6:0A:86:2D:C3:2C:E8:97:7E:1E:DD:9A:98:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5c6363-1141-3b6a-b5b4-ca6931ad783d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b058::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:15:53:34:3b:0e:61:b1:a1:fc:29:70:bb:c7:ac:7d:7a:3f:
         e4:3b:fb:03:42:f9:f0:d2:34:06:84:d0:23:dc:e0:30:f0:6f:
         7a:d2:0d:62:6f:46:99:06:a0:8c:f5:07:25:4f:af:34:ca:72:
         f2:cf:b1:7e:f1:33:a1:ab:1d:51:6d:d9:67:b8:f5:bc:bf:5d:
         54:22:78:bf:76:8f:a0:3d:3a:53:d9:78:ff:61:c4:c2:46:ad:
         da:f4:a4:f5:d1:61:12:f1:a6:dd:fd:75:ce:2c:8d:6d:23:c9:
         05:5d:fa:4a:37:a4:20:28:16:e1:16:1d:e9:aa:c8:02:4d:86:
         21:30:9b:19:93:52:e2:9b:bb:d2:91:77:fc:84:57:88:19:37:
         42:0c:82:9f:b1:e6:fd:9b:e3:38:a3:a1:26:a8:a3:03:e3:04:
         a9:42:8c:8f:1e:47:56:1b:7f:62:a0:fd:ef:2d:cc:bb:88:c4:
         bd:68:3a:c0:6b:51:06:56:9e:17:e6:bc:88:2a:1e:50:18:2c:
         d6:75:83:17:d8:fb:24:8e:4d:91:00:b8:2f:51:9e:d2:77:da:
         8e:04:f5:57:13:1a:f1:7f:e7:51:95:df:19:ff:d8:f6:db:8a:
         16:87:b1:90:15:15:e6:56:f3:33:27:f9:e4:85:1c:6a:e0:47:
         cc:7d:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:24 2025 by rpki-client