Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b673679c-032c-3ddc-8699-01b8086cf627.roa
File:                     b673679c-032c-3ddc-8699-01b8086cf627.roa (raw, json)
Hash identifier:          GG+tjGZ30n3ouBdsHVmvvPoz992PvmfNVEbVOWXcGLo=
Subject key identifier:   D4:99:4F:1D:9B:6C:27:B9:4A:57:00:49:7A:15:97:33:45:90:68:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9188B8E04268F74C4200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b673679c-032c-3ddc-8699-01b8086cf627.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100a:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:91:88:b8:e0:42:68:f7:4c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=6d1cd339-1467-441d-b1ad-4eb8f82d76ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:7c:d3:2c:0f:0a:c7:f2:28:60:46:5b:32:
                    2c:3f:66:c7:d4:ef:db:04:5e:ad:fb:0c:5a:a9:25:
                    dc:85:19:15:06:c0:f1:f9:1c:7e:77:6d:71:3e:3b:
                    49:c2:3e:ff:bc:99:0f:db:be:97:3a:d8:d8:ba:13:
                    9d:15:ca:78:38:bc:e7:50:79:d0:11:e7:1e:b2:22:
                    2e:8f:82:f6:83:93:81:0b:80:3c:a8:ae:8b:c8:cf:
                    c0:15:87:5b:be:dc:53:8b:f5:5a:5b:59:e4:cd:c5:
                    e8:e6:34:86:92:6b:cc:72:15:bb:96:8f:f6:ea:69:
                    e3:41:c9:e6:df:b9:6d:a4:2a:ea:61:8d:c6:c0:3a:
                    f7:ea:5e:34:d9:34:a8:5d:66:da:d7:27:3a:09:b5:
                    93:b7:12:11:53:c4:f9:82:98:90:72:e9:50:41:b7:
                    ee:0e:e9:1a:1e:73:09:c7:9c:b2:26:69:17:8f:22:
                    ae:ae:e4:80:2b:ca:51:76:2e:49:c0:eb:ab:cc:d6:
                    57:66:4b:25:9c:f7:55:ca:c2:df:9a:5d:7f:0a:47:
                    86:ad:eb:a7:3d:84:94:58:5e:08:a0:a3:04:ea:c1:
                    9e:0f:92:13:c3:6c:2d:7d:6d:0f:2e:66:94:34:04:
                    eb:63:07:64:a5:83:35:45:61:22:24:d2:df:ed:e8:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:4F:1D:9B:6C:27:B9:4A:57:00:49:7A:15:97:33:45:90:68:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b673679c-032c-3ddc-8699-01b8086cf627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:86:a6:73:6c:0e:8f:49:e9:2d:75:35:84:f5:cd:b8:aa:
         fc:52:ff:86:52:98:43:a0:0d:71:d7:ec:c3:ea:34:8d:30:3c:
         1a:67:6f:44:bd:8c:fa:c2:99:8e:ba:fa:b7:86:29:7d:82:26:
         bf:bb:af:d0:3e:b3:16:99:83:60:44:0e:1c:51:50:00:fa:e9:
         59:05:09:33:76:36:fc:76:77:e4:06:03:ae:73:3d:fd:5b:23:
         66:28:55:46:93:54:86:d3:e6:69:e3:ea:94:ef:fe:81:3f:c8:
         9d:d7:79:6e:b4:b8:5f:ea:91:dc:0f:e5:62:aa:29:26:96:bd:
         b1:39:44:fd:6c:7a:0e:2b:fe:d8:86:91:f2:0e:3a:11:36:45:
         31:ab:91:3a:7c:f7:f7:dc:12:4b:25:09:5f:9e:94:ed:3c:f9:
         ea:dc:dc:6a:f9:ac:2f:7a:7d:0c:41:84:8a:84:d4:6b:7a:af:
         f3:1c:b2:88:c9:d5:ea:3b:d7:0d:ae:db:e7:27:39:2f:a9:76:
         06:cc:0e:20:17:e3:22:ed:50:e3:15:99:ea:f2:b0:8a:34:14:
         12:c8:c2:67:e6:9b:7e:2a:fd:96:73:ef:8a:73:27:2f:95:ee:
         cc:36:d2:b5:52:73:de:38:cd:b4:9b:10:a5:2c:01:e4:f7:33:
         c1:b3:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:10 2025 by rpki-client