Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa
File:                     a2c64a59-f187-39b3-a84f-4da6d91a197b.roa (raw, json)
Hash identifier:          I8WFcqGc4AJa5qXUDcO76dZXtwbbHxj7eOsl3BxXUMg=
Subject key identifier:   9A:79:7F:A3:E6:90:13:5B:40:D2:E9:AE:D7:C1:E6:FF:52:FC:41:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7EFAD3CF2B4614804800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:7e:fa:d3:cf:2b:46:14:80:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=b0e71668-6971-4378-9c53-711470106fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:c1:16:59:ee:ea:95:22:c5:e0:aa:91:4a:
                    44:3c:ae:33:fd:0f:d0:03:84:a0:91:17:7f:04:d4:
                    f5:18:82:23:17:10:0f:c8:72:cf:95:ec:d8:4c:d8:
                    d0:ac:45:e7:4d:f0:1e:cb:47:cd:56:eb:2a:cb:64:
                    4e:9f:4c:92:2a:40:91:b5:85:5f:b1:3c:cf:e7:5c:
                    0a:5b:82:be:f5:b2:76:ac:b0:a9:20:a6:bc:ba:bc:
                    e2:7a:5e:26:71:24:74:9a:3c:f0:7b:1f:7d:02:5b:
                    fb:39:dc:15:65:96:4d:f0:68:09:0f:ed:e3:ca:48:
                    74:13:b5:c6:ca:4f:42:b0:c2:40:83:53:09:38:55:
                    4e:77:b2:c0:81:d1:6c:44:79:e4:80:86:3e:29:e0:
                    25:bf:f8:b6:c5:43:bd:f7:6a:b8:4b:09:90:43:19:
                    1d:79:eb:08:f9:f7:92:4a:cd:ce:f5:34:02:f8:f2:
                    03:b9:d6:f3:49:4a:58:2d:cf:45:38:68:3b:16:ef:
                    f7:cf:c4:46:94:5a:b3:9b:4f:1d:15:c2:cd:b7:1e:
                    cd:85:36:68:53:30:61:d6:1c:a2:d1:6f:9c:7e:13:
                    3c:c2:5d:60:75:b8:3e:5a:2d:91:bc:d7:ea:a8:50:
                    89:7d:6e:3e:23:5a:41:97:fe:f5:90:85:2b:e8:5b:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:79:7F:A3:E6:90:13:5B:40:D2:E9:AE:D7:C1:E6:FF:52:FC:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:a3:f3:fc:6e:33:ea:a4:62:80:29:e8:44:c6:3f:86:47:
         d7:9b:26:31:33:b7:d2:df:29:0e:a2:2f:7f:a2:3a:80:14:7c:
         f0:67:d6:e4:bc:49:6b:fe:7d:ca:bf:ea:bc:f9:96:ec:e0:18:
         6f:f2:d8:ce:e4:60:88:77:e5:81:67:e6:04:4b:71:a4:66:98:
         be:dd:ac:3f:63:f5:1f:67:9c:16:b4:a9:74:27:b8:df:6b:3e:
         cb:ef:b0:1a:dc:48:7b:68:61:19:14:3a:7c:a0:de:1b:88:d5:
         d8:be:52:6b:e1:d1:65:a8:4c:66:47:3f:69:82:e8:56:e0:6c:
         4f:71:f9:06:40:17:7b:43:ba:88:b7:98:85:b5:70:a0:4d:dc:
         c3:83:82:bf:05:dd:2d:36:51:99:5a:c9:96:8d:b4:be:9e:b6:
         64:16:c7:91:40:56:d8:a7:0a:a1:c4:1e:c1:7c:a9:9d:1d:7b:
         d1:99:a6:b9:07:54:ba:c1:ec:9a:8b:bc:95:84:36:f0:e8:79:
         7a:3c:78:69:10:81:5f:d9:f9:80:1e:0f:15:68:c5:4e:ea:c9:
         4d:0a:b6:1e:97:00:6c:3c:ca:39:c3:38:d3:f3:75:27:f0:11:
         48:18:a2:f6:f8:52:37:12:b7:f4:db:2c:c6:88:dc:08:fa:d7:
         e8:0b:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:22 2025 by rpki-client