Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90622fed-6cb0-3e44-aa85-d2ea33917554.roa
File:                     90622fed-6cb0-3e44-aa85-d2ea33917554.roa (raw, json)
Hash identifier:          5jfYyrtk/O0geAicFp6BnNy4se/GtttnAnWI5l2+oAY=
Subject key identifier:   32:45:04:87:14:AD:70:C8:31:C1:54:5E:ED:B7:B0:F3:77:66:A4:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3728A51A6BB68D47FFEA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90622fed-6cb0-3e44-aa85-d2ea33917554.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b270::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:28:a5:1a:6b:b6:8d:47:ff:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=198ab2ae-6ae1-4963-a20e-638a601dabb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:f1:64:f7:e6:ba:eb:74:59:7c:c6:35:81:
                    a7:6a:23:46:73:12:46:1e:9d:5e:62:d3:43:32:cb:
                    f2:f6:8f:fc:a5:1c:a6:ee:1b:69:a1:0c:3b:2d:91:
                    80:8d:1c:55:20:07:ff:01:09:1e:45:01:f7:97:5e:
                    83:f2:f7:46:e1:7a:6b:db:27:c4:4b:91:f1:0b:8b:
                    0b:59:3f:40:90:eb:77:c8:d2:17:bb:66:66:9c:9a:
                    14:44:fd:42:fe:0a:b0:fe:f6:94:95:21:21:f2:07:
                    82:c7:8c:e1:1b:da:e0:cb:62:ee:92:4c:e8:fc:69:
                    3c:c5:33:fe:e7:b1:a3:8a:96:ed:b8:cb:b3:e4:fa:
                    29:4e:f1:b0:73:e5:b4:d9:41:d7:8c:4a:30:fe:31:
                    ce:0c:d7:47:01:39:f0:06:f1:2c:3b:e5:ea:53:27:
                    14:76:7a:52:f7:68:99:29:72:e6:0a:73:2f:aa:fc:
                    2a:d5:2d:2e:95:01:75:5a:1e:96:71:4e:c9:79:29:
                    39:4e:f5:79:b5:1b:f9:65:7f:c0:b4:31:45:62:81:
                    55:35:b0:bc:cd:e6:b6:8a:fa:ae:81:f8:f0:be:12:
                    a5:8d:a7:ee:5d:ae:39:2f:32:6e:79:28:f5:f5:6f:
                    9d:c0:ff:2a:bd:39:2a:59:85:c7:6b:2b:d0:fb:99:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:04:87:14:AD:70:C8:31:C1:54:5E:ED:B7:B0:F3:77:66:A4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90622fed-6cb0-3e44-aa85-d2ea33917554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b270::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:69:d0:d9:f9:af:70:b4:2f:54:24:c5:6c:a1:ef:7d:7d:73:
         e4:77:4a:2f:5a:c8:bd:cc:05:d9:42:60:38:be:ca:ee:5d:5e:
         1b:c0:e5:62:42:69:90:b7:07:3e:c8:ea:4c:f8:ab:8b:0a:d6:
         af:5c:08:9a:bb:c9:54:b5:55:6d:91:10:93:52:20:8a:c4:1a:
         b9:e1:cd:6f:54:f9:09:f3:66:e9:84:62:e2:ed:07:d8:44:3f:
         60:9a:07:9c:f3:a1:56:b8:f8:d6:5a:3b:97:82:00:81:78:c7:
         32:97:bb:6b:45:42:a1:ff:6f:ec:4a:f1:e4:40:0a:34:f1:54:
         fa:0b:1d:d4:fe:1b:53:2f:03:32:44:bd:1b:ae:11:e9:b4:a4:
         23:fa:07:ca:5b:f2:da:60:d1:74:4c:5f:a8:c2:ac:5e:94:18:
         e9:97:40:ed:94:19:56:89:e5:71:64:c9:94:7e:4d:1f:a4:a8:
         c0:1b:6b:57:6f:82:af:e2:f8:fe:13:da:22:d7:4e:56:fe:52:
         30:50:95:84:04:3f:02:0e:c4:03:08:50:34:5f:5a:4e:b8:c6:
         b7:8c:05:94:74:70:99:ed:68:2a:3d:69:02:96:e7:5e:17:16:
         81:78:11:38:ca:3e:c4:2c:be:1a:ff:7b:1d:bd:db:1d:0c:6e:
         6b:b7:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:10 2025 by rpki-client