Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa
File:                     b147d2cf-f6f7-3111-a969-219bd3193382.roa (raw, json)
Hash identifier:          ojZ2Qf8+0osRiuxG9b6VhymqXYJXC1/dD1bZdY/ZxEo=
Subject key identifier:   BA:6C:80:02:C9:D6:03:54:D7:C2:FF:7D:D7:C5:B1:3A:AB:1E:48:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EE1891F704DD10EE8C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:9140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ee:18:91:f7:04:dd:10:ee:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=78555323-ef65-490d-b253-962db0edb619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:ab:7c:48:11:57:d5:b0:da:a8:0a:98:1c:
                    b1:35:bf:9c:bd:57:4d:a8:5a:3d:68:c5:88:d6:b3:
                    3c:30:08:07:ed:48:1a:d0:87:92:95:3b:8d:98:97:
                    42:a3:8e:4f:f2:74:88:37:26:25:1f:46:dc:68:25:
                    18:62:a8:b4:0d:07:84:9f:43:d0:0b:03:33:36:4d:
                    7e:a4:bc:8c:a5:d3:a1:58:90:ca:11:9f:c3:c1:a8:
                    5a:96:6a:e4:1d:f0:2f:3d:03:ae:8c:20:89:b0:5d:
                    5c:70:6a:9a:fe:65:6b:a5:62:a9:32:4d:7d:27:10:
                    8e:bb:6d:18:10:20:37:94:28:6b:b7:c7:b6:3f:73:
                    36:d1:79:43:77:6c:d8:cd:04:c6:29:3c:97:fd:9c:
                    40:58:b8:fb:fb:24:3b:52:bc:41:59:51:79:a8:67:
                    eb:98:33:b9:f1:5a:e2:47:5a:b5:68:7c:dd:1a:f2:
                    bd:f1:f0:1b:2f:e7:9a:86:4c:8e:4a:84:ce:08:a1:
                    94:1a:e8:ff:92:bf:53:6a:c9:77:e1:bb:79:a7:3c:
                    57:07:bc:23:44:da:be:0f:c0:bf:f3:02:70:63:56:
                    23:10:3e:53:b1:f6:d5:17:cc:53:3d:88:04:55:9d:
                    f5:9b:89:61:32:c8:af:fc:5e:77:1d:b5:4a:f8:2e:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:80:02:C9:D6:03:54:D7:C2:FF:7D:D7:C5:B1:3A:AB:1E:48:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:9140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:93:35:0c:a1:38:92:90:9e:3f:76:6c:11:4e:7d:d2:6f:ce:
         52:44:6f:03:8b:56:83:25:cb:c1:be:5a:ab:85:ef:74:a1:f2:
         69:fc:c4:be:e1:0d:07:e7:ec:34:c8:4b:52:42:1e:22:9f:4e:
         31:ea:ec:30:0c:65:85:7e:b3:aa:36:5e:24:67:58:22:47:85:
         ff:1e:c7:cd:44:46:dc:2f:c2:5b:fa:84:ff:7f:32:10:07:63:
         f0:b5:d1:a0:c5:e1:43:f5:22:89:f7:b8:a3:35:f2:da:b7:9a:
         5b:1f:7d:d4:96:b3:80:33:b4:f9:a3:9f:f9:a1:32:1a:25:c8:
         b9:88:f8:52:26:28:09:3f:c3:64:03:36:91:50:d4:59:2c:16:
         5e:fb:48:a6:ae:04:19:01:4b:b9:17:c6:ed:eb:ed:ec:1a:af:
         0e:c8:8d:18:1f:da:f6:27:4b:fa:5f:e4:97:26:04:bc:cf:90:
         88:ad:e9:c7:75:46:98:ed:0a:52:58:94:f9:62:f2:a4:2f:dd:
         40:eb:4f:7c:37:39:83:32:3c:26:7d:fe:ee:09:62:a5:31:fb:
         63:81:65:4b:d0:c9:49:d1:30:88:72:ab:ff:94:cc:ce:f5:2a:
         a9:07:a3:f7:bb:a3:84:37:d3:06:e0:92:28:ce:31:a5:28:6a:
         ae:be:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:48 2025 by rpki-client