Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa
File:                     8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa (raw, json)
Hash identifier:          fc/1RAFR5uWZO2enJa2oKF0KY+t1zCWgxK0zGkA/g7U=
Subject key identifier:   55:92:87:A5:0E:58:E6:AB:EF:4A:C6:61:DF:F8:6E:8C:96:8E:E5:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371D9B1E26CA3D9F38F580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1d:9b:1e:26:ca:3d:9f:38:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=ea2e783d-e4a5-4715-8fe2-1eb96268bd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cd:ea:a7:eb:58:ab:44:88:7e:1d:2a:37:b6:
                    42:ea:c9:17:84:28:9a:72:c7:4d:63:a2:46:97:ea:
                    80:a7:50:b4:77:3e:c5:66:fa:ff:c6:82:1f:e5:a6:
                    9e:8f:3d:ba:1f:06:86:51:f2:1e:41:7b:c2:59:d5:
                    7f:d9:2d:4e:d7:6c:d5:5e:6f:68:32:a2:58:d1:17:
                    da:df:fd:58:f0:63:0d:39:a1:a7:5a:33:e8:98:c4:
                    b1:ca:e6:21:3c:49:84:6d:f7:82:88:b8:f8:03:cf:
                    cc:5f:93:b4:f5:2d:16:be:9d:61:a5:16:16:c1:c2:
                    cd:44:b0:1b:90:2e:fd:54:b1:75:e9:d9:09:4e:59:
                    b4:7e:06:3d:99:fe:f2:c9:e2:ff:45:6e:56:8c:6c:
                    5d:17:e6:87:5e:a1:69:a2:5b:c6:77:9c:75:70:d8:
                    d4:98:06:38:2b:ef:55:9c:b7:31:ec:9e:ed:88:77:
                    e2:64:5c:f4:f7:65:49:1c:f9:61:a6:fd:9a:3b:a7:
                    74:d7:d7:09:d0:5a:52:05:5b:68:93:8d:d8:f2:cf:
                    90:09:26:a3:d5:1a:88:3f:19:3a:12:d1:75:a9:f3:
                    b9:f9:9a:f5:5d:f2:ce:04:90:09:72:56:b0:66:eb:
                    fb:d0:64:2c:e8:fd:95:00:2b:0b:03:9a:29:28:24:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:92:87:A5:0E:58:E6:AB:EF:4A:C6:61:DF:F8:6E:8C:96:8E:E5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:98:50:64:c2:5d:5b:e5:fb:a4:82:6d:2b:4a:98:08:18:
         d5:ee:17:96:e3:c6:86:b2:21:3f:25:5a:eb:27:8a:4c:d4:2d:
         7d:48:70:2c:a3:10:50:b9:39:b4:6a:9f:e0:f5:cf:eb:07:32:
         65:dc:0c:18:70:12:fc:f3:05:5c:0f:ae:c5:37:08:a3:37:97:
         53:9c:d6:24:fb:6e:85:b1:55:29:48:55:30:f0:48:eb:be:de:
         52:6e:ad:fd:a4:e7:e8:19:4c:3f:ab:54:24:c2:4a:0d:c7:d7:
         90:93:6b:66:f9:35:d5:70:83:7c:be:1e:a8:c1:5b:78:2d:cf:
         05:73:48:32:87:0d:25:a6:34:d0:c9:96:ae:5a:44:88:2c:b4:
         2b:c6:43:2c:35:25:61:ba:e5:e7:f0:ed:84:d0:71:78:1c:04:
         6a:36:d7:fd:40:00:16:9e:40:55:49:ad:31:f7:5a:c7:79:00:
         f8:96:19:24:c6:43:b4:c2:83:2b:9e:f1:e9:5a:ce:74:51:96:
         d1:07:82:cf:06:1a:bc:53:6f:c2:0f:13:72:03:00:69:75:6d:
         1a:c7:14:7c:94:d3:2e:69:02:df:dc:61:8b:01:e5:74:41:fd:
         84:e9:a2:44:d9:ec:a0:c5:73:31:47:a5:3c:c3:b8:d5:f9:08:
         22:a8:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:38 2025 by rpki-client