Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bba516-2d47-3b82-ac1b-56f5700bc368.roa
File:                     94bba516-2d47-3b82-ac1b-56f5700bc368.roa (raw, json)
Hash identifier:          L1gD+IcDz+lWcd8YXuY/+UYUo2y72bHPzJENAaHY1RA=
Subject key identifier:   17:1C:35:A7:71:4B:3E:14:AD:5C:03:4F:F6:BA:4B:7F:2B:3C:79:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1D885921CEFE7EF6C971F
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bba516-2d47-3b82-ac1b-56f5700bc368.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1014:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:d8:85:92:1c:ef:e7:ef:6c:97:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=1731a200-397c-4d70-a555-ccd500ef1c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:9a:8f:31:6c:50:83:93:2b:ed:46:1e:5c:
                    7b:7a:03:9e:09:37:2a:d0:b0:cf:82:84:02:f8:d5:
                    05:60:f6:dc:01:52:f5:b5:3d:9a:d1:e2:78:91:2e:
                    2b:71:79:79:64:f9:86:fe:83:45:78:3a:f7:4d:f9:
                    e7:68:a4:a0:6a:fe:e3:1b:f0:61:0d:38:7a:96:34:
                    9d:d6:75:18:70:55:bf:b0:55:4a:72:48:8b:1b:58:
                    df:5c:58:f2:46:79:c2:a3:3b:cd:ec:44:07:48:93:
                    23:e9:89:2d:ac:a8:f8:8f:10:d0:30:ae:2e:60:22:
                    ea:2b:78:4b:f9:01:f5:8a:47:5a:2c:e0:0a:4a:fd:
                    b8:a5:23:56:56:bd:f8:60:95:f3:c4:56:d1:2e:35:
                    e9:e3:71:7a:3e:dd:4f:82:5d:62:65:80:04:57:ab:
                    c1:09:fc:f4:60:d2:72:70:7e:fb:ad:c0:a5:2f:f9:
                    84:f8:2e:67:ff:12:f7:34:4f:41:18:73:3f:4f:bf:
                    28:b5:a0:7b:2c:a1:2d:c5:f4:8c:0a:a5:e1:dd:f4:
                    15:c2:1a:61:e3:39:41:ad:a5:aa:3c:ad:9d:97:8d:
                    d0:f1:0e:5f:ad:20:d9:fb:80:46:e6:b8:ab:b4:a6:
                    09:8d:eb:94:65:0d:d0:2a:3f:f2:a9:ab:4d:da:05:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:35:A7:71:4B:3E:14:AD:5C:03:4F:F6:BA:4B:7F:2B:3C:79:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bba516-2d47-3b82-ac1b-56f5700bc368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:58:69:29:a6:4d:6e:19:f9:04:d9:cb:1a:89:1e:6d:18:
         bb:15:bd:2c:85:5c:a3:07:56:d4:b4:aa:f3:47:95:09:4d:fa:
         8d:f2:5d:e0:08:0f:cc:bb:36:14:f5:a9:27:30:46:ed:2f:0f:
         0b:20:ec:c8:57:98:0d:8c:c3:bd:08:66:cc:22:d1:17:e5:08:
         41:5d:66:f3:b1:20:17:45:04:e3:0e:08:05:e6:44:e7:77:aa:
         39:a4:e3:7c:6a:01:6a:dd:3a:84:c5:87:05:22:6d:65:2f:22:
         37:c4:1d:e4:98:bf:dc:9e:82:c7:46:55:e8:eb:88:a8:3d:86:
         98:7c:dc:5a:79:e6:35:36:cc:c6:d8:95:63:c8:d0:ee:eb:2b:
         ad:73:8d:75:5d:e1:f3:d1:69:a8:71:68:df:59:2c:63:03:9a:
         eb:49:96:cb:e9:37:b3:0a:99:26:6f:5f:3c:0c:9c:07:02:e2:
         c6:ec:b9:8c:2b:02:78:cb:68:1d:98:df:74:61:13:e2:c0:32:
         c7:04:61:86:b7:26:e0:35:e5:65:52:53:04:df:b5:51:bf:0c:
         a4:17:6e:e1:4f:5e:6b:e1:40:8e:e6:b8:49:30:af:4f:81:1b:
         2f:09:2a:6b:6f:6e:ae:ea:08:bb:ff:6a:0f:30:76:25:bb:55:
         64:82:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:59 2025 by rpki-client