Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9147e227-643e-34aa-b09b-7a0a796ca320.roa
File:                     9147e227-643e-34aa-b09b-7a0a796ca320.roa (raw, json)
Hash identifier:          GP/ao5B3TbqnE7yKYuCqB9ygMJ/8icrRl2wcbmB+0dc=
Subject key identifier:   01:8E:A8:A1:BD:F0:56:22:1A:59:14:9B:1C:C2:F1:FB:DE:6C:0B:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1D767604DA7B3DAD13800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9147e227-643e-34aa-b09b-7a0a796ca320.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1006:b348::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:d7:67:60:4d:a7:b3:da:d1:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=da07c097-053a-4c0c-91f3-88520f67b20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:c4:78:fa:d8:28:9e:00:a3:4a:32:a2:3b:
                    48:66:c3:01:9a:4a:e1:86:9b:92:2c:fb:ca:a3:4c:
                    a0:99:9e:df:ae:25:35:eb:37:3c:73:d3:9a:cd:35:
                    78:4a:cc:d7:d9:47:37:3a:20:5a:e5:db:7d:cb:5a:
                    a9:1b:1e:e7:43:eb:04:b7:94:7b:d2:d9:c3:31:76:
                    81:d4:c8:e2:e2:0f:ec:21:ea:c8:fa:13:68:a9:07:
                    cd:71:0d:db:be:68:0b:86:d2:f5:4e:1a:c2:72:82:
                    2e:45:91:ef:a2:cf:04:00:5f:64:af:f8:78:67:a0:
                    62:43:a8:ba:76:b5:5d:5d:82:4e:be:32:2e:59:89:
                    39:d8:69:ed:f7:48:fb:94:51:17:74:85:11:06:11:
                    56:2a:22:c2:a2:67:73:20:53:68:65:29:29:3e:1a:
                    71:90:f3:7a:d0:ce:7c:60:50:ba:42:bf:0a:38:28:
                    dc:d6:4a:f5:ac:d9:57:30:58:6d:13:39:4d:90:9d:
                    97:97:b4:3c:16:01:44:ac:d8:8b:b5:0b:6a:77:bd:
                    c1:34:87:3b:a6:e5:41:8e:fb:af:4d:0b:ce:70:11:
                    8c:0e:44:40:6f:ed:3b:12:12:bc:99:59:62:c1:bc:
                    88:9c:cf:c3:d8:23:61:4b:30:dc:fa:b4:2d:85:59:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:A8:A1:BD:F0:56:22:1A:59:14:9B:1C:C2:F1:FB:DE:6C:0B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9147e227-643e-34aa-b09b-7a0a796ca320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b348::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:57:60:18:a4:3e:c5:59:33:20:42:dc:7f:ae:23:e4:7c:87:
         66:85:6c:cc:34:7b:2c:91:7d:da:15:91:5a:60:62:bb:e6:fa:
         2d:3e:db:79:00:f4:a0:d4:01:d6:3a:34:74:be:b8:68:af:5a:
         ac:11:ba:37:71:91:1b:4f:e8:56:55:20:23:bc:7a:bf:e3:b5:
         9b:40:d9:5e:a8:16:d3:03:49:5c:ef:bd:f6:07:1f:d8:de:ee:
         99:68:7c:e0:cd:2d:51:78:7f:ce:17:74:bd:7b:19:4c:71:44:
         f2:92:c2:e8:96:b1:23:e9:54:ec:7e:20:0e:8b:bb:41:44:83:
         a1:ed:62:c3:e9:f9:0f:66:56:3b:9b:08:c6:7e:a3:fe:09:82:
         99:11:77:5a:4c:75:83:98:f1:e7:77:5d:85:08:c7:f4:0c:4a:
         8a:bf:10:36:87:7a:8e:cf:ef:c5:f9:c0:7e:3a:75:77:82:57:
         b6:03:59:6c:31:6f:6b:93:af:95:30:0b:5a:8f:f9:c8:56:08:
         2c:23:5b:45:a4:36:b7:a3:6a:fe:c7:a7:04:c8:b8:0d:20:9d:
         89:f1:4c:30:48:b9:a6:7f:f2:52:66:96:fb:43:2d:7c:34:48:
         2b:64:32:05:45:4e:f6:48:7a:42:f9:df:ad:bd:48:b1:b1:be:
         fe:bc:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:55 2025 by rpki-client