Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa
File:                     9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa (raw, json)
Hash identifier:          qxTUfgX4Z5U6FN8azawmeVSVCvmA790mauIABJKp4AQ=
Subject key identifier:   C2:FC:DC:3D:27:0C:2F:D7:EB:96:FA:B8:2B:3F:C2:92:7B:73:5E:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371D0AEA7444139C5D5560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1d:0a:ea:74:44:13:9c:5d:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=59b910e2-c97a-4994-9e20-0854cd4435e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:f0:34:93:59:8e:92:b0:27:65:62:77:29:
                    07:c5:16:d6:81:93:85:fd:24:03:ae:3d:15:62:df:
                    c5:2c:d5:95:8e:75:84:9c:fd:11:f7:22:ec:d7:0d:
                    1d:be:d5:af:bd:94:2e:82:69:83:5f:46:8c:56:cf:
                    cf:88:fe:33:ed:a0:18:dc:12:47:0c:75:1e:72:d8:
                    ec:c6:d7:46:19:13:86:bf:3b:99:5a:68:a1:6c:a7:
                    3b:f9:bb:8b:2a:87:f6:8e:3d:f5:9b:5f:fe:8a:b2:
                    ce:b0:cf:aa:f5:89:70:c5:02:ab:ba:50:8a:8f:e8:
                    67:c6:41:34:c2:e1:30:71:84:a9:44:f9:77:f8:a6:
                    58:80:ed:a8:10:53:d7:d3:97:84:ce:e4:3f:32:34:
                    92:7b:bb:bc:a0:07:02:aa:08:16:c5:ca:0c:ac:c9:
                    75:3b:fd:8f:a5:4a:2c:e2:4d:2f:35:72:9a:60:fa:
                    dc:53:f9:e1:d9:53:a8:c0:b5:f6:25:1e:21:b9:ad:
                    90:dd:b4:16:f6:ab:19:62:5e:86:38:28:bb:c2:e3:
                    33:5b:2d:48:4e:16:c4:c0:5c:75:87:56:31:9d:4d:
                    e4:62:20:1c:17:9e:94:7c:b8:38:26:55:3e:06:96:
                    d8:a2:cd:80:89:05:f1:74:a8:01:7e:0e:c0:fb:3c:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:DC:3D:27:0C:2F:D7:EB:96:FA:B8:2B:3F:C2:92:7B:73:5E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:23:24:b8:90:73:a2:23:c2:c5:fc:a2:bf:a5:df:a1:62:13:
         9b:12:7f:9d:c1:98:b1:12:79:65:86:97:f8:b0:12:cc:f0:2e:
         e4:1e:75:54:23:71:5e:dc:6f:12:c5:6b:df:04:c5:1f:0f:db:
         ab:2f:b4:69:ff:a2:98:41:a4:4a:3a:5c:37:c3:cb:62:20:96:
         08:c6:37:63:4b:2d:fd:b9:1f:07:9a:12:d4:7e:9a:b7:15:f4:
         ba:7c:d3:06:06:d4:4a:60:b8:0f:b0:2b:33:e2:c7:f3:5a:be:
         77:9f:32:b5:07:d8:3a:40:31:ab:1a:c2:52:c8:91:c4:3d:33:
         f2:a3:3e:6d:5b:25:e8:ac:13:5e:f1:a8:79:68:b6:75:3c:b5:
         0d:ff:f0:9e:59:cb:ca:96:28:18:a9:40:a3:19:79:05:69:ea:
         61:d4:50:0a:69:94:ac:98:7a:f7:67:8e:ec:ec:ba:94:e0:dd:
         19:a9:2e:be:95:37:a6:ec:f6:04:a0:9a:38:82:ea:ad:e1:37:
         77:07:e0:45:6b:fe:7b:7a:7a:5f:ac:32:8c:d8:6e:5c:66:dc:
         d0:a8:fa:a2:f2:3c:b7:59:43:18:13:5e:cb:5f:85:7b:1b:6e:
         d0:17:97:44:32:8c:c7:bc:95:6a:da:31:92:4b:6e:51:4f:f3:
         96:80:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:07:58 2025 by rpki-client