Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93b34aa1-8c3e-3739-9399-b95e40246b3b.roa
File:                     93b34aa1-8c3e-3739-9399-b95e40246b3b.roa (raw, json)
Hash identifier:          Gu7wJjji879VqtOAGvG9Jt3kQNDFC4O6t34IAOK5pUE=
Subject key identifier:   96:B7:E8:5D:F8:1C:D8:09:0A:53:5D:0D:E4:36:C7:FF:DD:D3:DF:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C372040319AC547E02C3CE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93b34aa1-8c3e-3739-9399-b95e40246b3b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b0ea::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:20:40:31:9a:c5:47:e0:2c:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8a5d5504-9dda-4906-8ccd-fcba8451ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:16:d2:4e:ae:04:80:cd:d6:be:88:af:f4:
                    37:b8:07:ed:6d:8c:6a:3b:c0:4d:c1:92:00:72:9b:
                    80:48:78:14:87:d0:87:86:3b:3e:45:8d:51:d2:42:
                    6f:ff:f5:06:c1:e5:2e:d4:de:a9:e4:d2:2c:74:f4:
                    57:91:6d:e0:6c:34:fc:3b:45:57:f8:bd:93:3c:08:
                    1a:2a:53:85:3b:c9:de:03:8e:1d:0c:bd:b9:56:bb:
                    5a:98:ff:15:8a:3f:78:4e:a8:8d:75:b3:57:cc:da:
                    8c:24:45:dd:0b:d7:9b:2f:62:53:c0:d5:a2:c1:8f:
                    30:d3:3d:c1:08:1a:37:b5:f6:be:48:a6:37:5f:20:
                    8a:b2:52:20:99:43:ce:0b:9f:51:dc:a2:28:78:58:
                    bd:d2:af:75:41:e2:2c:d2:c3:d4:57:d6:8d:df:08:
                    36:bf:23:89:47:35:9a:16:13:0b:de:60:4d:d6:fd:
                    e7:d6:a5:08:43:cc:41:53:8e:12:33:ab:3d:bb:6c:
                    ec:40:06:6c:cf:8f:c2:cc:b6:8c:14:e2:83:7d:b2:
                    6d:49:fd:0f:35:d0:a4:de:2e:be:c9:b7:59:f5:1e:
                    56:48:a0:27:33:8c:c5:9e:d0:a7:e6:9c:1a:32:34:
                    f8:05:6b:e1:e0:8a:27:86:11:23:84:b6:4d:55:9a:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:E8:5D:F8:1C:D8:09:0A:53:5D:0D:E4:36:C7:FF:DD:D3:DF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93b34aa1-8c3e-3739-9399-b95e40246b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0ea::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:4f:0d:fd:38:27:60:0b:93:ec:cd:16:39:86:1e:6e:63:
         ab:92:76:0c:61:e2:66:ca:46:de:9a:4e:f0:f8:7b:39:8b:2a:
         b1:5e:80:dd:24:6a:40:7e:1f:3f:14:43:fb:77:04:db:c0:bc:
         56:2c:30:dd:d7:be:b1:19:65:10:37:08:6c:e5:54:69:b5:7c:
         c4:10:31:49:a0:94:27:ca:de:fc:a2:3c:76:a5:17:a5:5b:40:
         8b:16:8c:36:76:19:ee:70:d1:39:04:9c:e0:d7:a9:23:8e:b3:
         47:4e:af:7b:93:2d:f6:f0:5a:83:f9:b5:2c:86:75:08:26:74:
         e1:63:79:25:fa:73:84:dd:a3:58:a3:bd:46:17:34:19:28:6c:
         53:98:99:a7:a1:d4:0a:29:e5:4a:8d:93:ed:74:99:75:ea:3c:
         d3:49:b9:21:74:e1:5a:9a:84:24:88:39:4a:09:cc:69:e9:69:
         94:55:78:96:07:fe:0d:11:9f:04:b8:88:10:ab:ac:91:50:67:
         be:f4:46:b8:b3:91:53:bd:31:ca:87:f1:ed:da:c8:d1:ba:dc:
         f4:b6:77:3d:3b:ef:a1:e4:f1:9f:fd:d8:10:a0:63:23:37:4a:
         92:2a:c4:64:60:a9:d8:71:37:32:cf:2d:04:49:80:5d:e2:26:
         92:48:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:24 2025 by rpki-client