Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cf2b14e-e95d-3f60-b7ab-04728c1bc75b.roa
File:                     9cf2b14e-e95d-3f60-b7ab-04728c1bc75b.roa (raw, json)
Hash identifier:          7Bzluq0FlCSSjYNlHirzffoGNhBcCOtspkGZLNCDMiM=
Subject key identifier:   38:07:86:5B:F6:3B:15:32:84:70:76:43:AC:31:3D:2E:0E:01:4A:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6631FA4167C32EC3E4EE1540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cf2b14e-e95d-3f60-b7ab-04728c1bc75b.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1010:9e00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fa:41:67:c3:2e:c3:e4:ee:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=7c0858cd-1434-4e14-82a1-d1b4d5314f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:5d:c2:c1:2e:0a:3b:b6:4b:60:6d:6c:68:
                    41:55:24:e0:4b:bb:2a:da:2a:89:d2:a7:ff:59:43:
                    1c:8b:22:0d:df:47:01:59:82:ab:50:f1:de:1e:02:
                    2f:45:57:f1:4c:ca:6d:1e:98:b5:7e:fe:53:9c:66:
                    30:89:c8:6e:cf:31:9e:bd:37:38:fa:f8:27:18:2c:
                    0a:72:3b:ea:32:bb:45:5e:fe:fa:d6:a7:0e:83:9b:
                    02:77:3f:36:33:85:3e:50:68:47:06:46:85:5b:08:
                    9a:5b:fd:81:b7:92:ac:61:fc:8f:b0:23:c5:47:f8:
                    dc:62:de:5a:32:16:f1:10:7d:e5:87:9a:ec:00:0e:
                    c0:05:77:a3:b9:14:96:cd:33:b0:f3:69:35:b0:3e:
                    89:76:f5:fb:cb:4d:20:cf:a0:47:4f:4a:2b:13:be:
                    6f:e0:88:0c:1e:e6:a6:79:ff:8e:11:ee:b8:fb:f8:
                    ad:e7:bf:8f:48:35:b4:8d:24:88:84:1d:48:fb:5b:
                    56:6d:9d:52:40:b5:28:70:68:ab:ee:a3:a2:1d:fc:
                    7f:17:b6:86:d9:78:d0:8c:98:1c:8f:a7:d6:3f:69:
                    98:ae:d9:02:25:d7:4d:e6:82:c1:ee:7b:a6:93:3b:
                    ae:6c:d8:7d:f1:18:ab:ab:c0:bf:52:cd:a7:7a:17:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:86:5B:F6:3B:15:32:84:70:76:43:AC:31:3D:2E:0E:01:4A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cf2b14e-e95d-3f60-b7ab-04728c1bc75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:9e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:12:8a:d4:26:22:12:e8:1d:2b:1d:a7:99:20:61:7a:2a:2e:
         84:7d:c4:47:ea:7d:60:57:26:1f:56:19:85:c0:0a:11:03:95:
         58:7c:d5:c7:f4:55:d3:38:e1:54:1b:f0:a2:84:ff:6f:d6:4c:
         70:cc:2c:b2:d4:0a:40:87:9c:88:8d:17:03:14:95:1c:57:0c:
         3a:ec:71:0e:d6:4f:d2:78:c1:a1:ff:b9:22:ad:51:13:05:e8:
         09:99:bb:0f:62:8a:f8:61:11:b8:03:59:4f:e8:5b:35:e7:0d:
         94:11:5f:a3:26:23:9a:f5:bf:d4:6f:5c:92:58:54:cd:a9:79:
         e7:e6:48:76:a0:5a:20:c4:58:61:fb:21:76:e4:bd:07:ce:3b:
         5c:c5:17:b3:ba:64:98:82:c8:01:d1:cd:3a:c1:3f:18:97:cc:
         59:ca:32:cf:da:c6:22:83:a3:cb:c7:9b:6a:24:84:76:96:1e:
         07:8d:fb:38:04:b5:4d:01:96:b2:2d:65:eb:48:fc:0e:06:65:
         a9:c5:95:47:8e:94:22:3f:0b:57:9c:70:be:6f:91:69:fd:a6:
         eb:41:e1:f2:b0:00:cc:05:0d:db:95:40:81:30:75:b0:fb:ba:
         87:3d:68:ef:da:be:a7:5b:af:cd:a9:aa:8b:f3:2e:2d:68:df:
         ae:7d:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:36 2025 by rpki-client