Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f0ecb6f-82ed-3ef1-851b-fad105d68973.roa
File:                     8f0ecb6f-82ed-3ef1-851b-fad105d68973.roa (raw, json)
Hash identifier:          O94drBwT93CC4lNFcmrWJMY0PLhrcyrCWaprx/rBXpY=
Subject key identifier:   0C:E9:EE:4E:6A:0F:95:1F:03:F5:00:3E:4A:C3:92:87:5F:DC:DA:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1174A7B507AC3C53166900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f0ecb6f-82ed-3ef1-851b-fad105d68973.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:74:a7:b5:07:ac:3c:53:16:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=626c30b3-4580-447e-942f-69d03a8d9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:0e:f3:9a:39:55:b1:ca:25:66:d8:17:3a:
                    9f:d1:2d:d8:0a:f1:27:81:a2:7b:af:63:87:16:27:
                    14:3c:ca:56:a0:2a:67:7c:da:10:67:1e:b0:66:23:
                    bc:10:af:1a:24:b1:eb:45:c8:0b:31:ba:5e:cc:c6:
                    d7:bf:2f:59:02:e9:d8:ad:fc:f8:6a:ed:55:c9:be:
                    aa:72:7a:6e:f6:43:9f:af:6c:f2:2c:32:41:b5:c7:
                    a2:54:5d:b5:32:7e:5c:d4:28:2d:c5:30:b3:a5:91:
                    cd:00:32:1d:3f:3b:70:ba:10:61:71:22:60:2a:95:
                    9b:78:ea:88:d9:e3:13:0b:ae:ee:16:69:28:47:f9:
                    d4:18:e2:bf:ed:42:6f:d6:10:40:ad:f4:a4:a6:87:
                    f4:0e:bd:29:2a:db:6e:fd:d5:15:86:6c:54:17:4d:
                    ed:c1:e9:b0:00:bc:63:c3:07:ea:e0:45:b3:52:37:
                    b5:93:fd:a4:6a:3b:de:9e:85:fd:6c:c0:95:5e:a5:
                    cd:02:ca:59:aa:44:3c:bc:cd:2e:b1:45:98:9e:8d:
                    1d:99:e9:f0:65:8c:1b:df:11:4e:62:c8:11:81:ca:
                    a9:ba:6c:dd:10:b8:3f:41:4c:f6:87:ba:2f:0a:80:
                    67:fa:8a:76:66:06:e9:40:2d:fa:00:96:04:85:f5:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E9:EE:4E:6A:0F:95:1F:03:F5:00:3E:4A:C3:92:87:5F:DC:DA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f0ecb6f-82ed-3ef1-851b-fad105d68973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:93:8e:33:ec:0b:91:a3:af:2f:23:a0:1e:53:d1:f5:0f:
         fb:29:e8:70:44:93:65:8d:08:f2:67:32:6f:f4:c6:fd:2c:8b:
         3e:fa:8e:59:d5:d1:38:4d:37:1b:23:f3:d2:fb:76:81:2b:88:
         86:44:2c:ac:bd:5f:62:58:98:44:ba:1e:ee:2b:d4:c6:ba:73:
         7d:fb:d4:57:b7:77:2f:49:33:d4:92:2a:7a:10:82:e7:90:fc:
         e8:a5:ff:7e:f0:28:c2:6f:7a:4b:0c:76:1c:84:cf:5d:8f:ea:
         41:8d:42:47:0a:2d:01:c0:98:42:95:29:06:d4:82:13:64:23:
         88:c6:ad:6c:42:76:ab:b6:6c:45:24:3b:e3:c0:21:10:f3:10:
         bd:86:63:91:7a:36:e4:65:60:e7:30:e7:81:82:0b:a8:01:16:
         f4:c0:3c:7f:4b:fd:c6:d5:85:39:93:93:a2:7b:08:35:44:d0:
         73:22:a5:c4:f7:51:57:2e:20:7d:be:98:bd:14:8e:a8:67:e7:
         33:82:15:12:79:37:1e:ec:bf:57:90:a4:55:7f:0a:7c:17:c0:
         8b:dd:6b:83:b7:a6:32:86:b2:30:23:be:06:14:16:31:85:88:
         0e:0b:10:6d:25:52:e9:1c:90:74:7f:af:42:23:ae:cf:f6:6a:
         02:08:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:29 2025 by rpki-client