Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86fd92b-29a0-3607-ac8c-48528982eb39.roa
File:                     b86fd92b-29a0-3607-ac8c-48528982eb39.roa (raw, json)
Hash identifier:          ryPlAOXRXkk+bhg22bkBn19XOkkFPWlpIcUNEiOcl24=
Subject key identifier:   FF:12:BB:B0:13:2E:07:25:6A:2B:FB:9A:BD:A6:E1:6D:E7:F5:06:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C372994B4A935D69C6369C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86fd92b-29a0-3607-ac8c-48528982eb39.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1008:b208::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:29:94:b4:a9:35:d6:9c:63:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=3bb91987-d88d-40e0-8066-ad00a635cf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:5b:01:aa:e1:2c:cc:8a:82:4b:97:73:5e:
                    5b:17:3b:f8:93:21:10:df:07:43:dd:cf:ca:41:ea:
                    d3:f6:af:af:e9:2d:e4:80:fd:2b:a8:ea:11:e3:2f:
                    41:2b:c2:c8:75:83:08:53:a9:fa:76:93:88:d3:dd:
                    c6:ba:66:a2:19:5b:e8:f0:0b:1c:18:56:20:06:ac:
                    c5:c8:76:c2:b1:bd:2b:9d:bc:a1:7e:4c:0a:be:13:
                    fd:e1:c2:e7:53:03:f1:ac:96:1e:14:83:d0:c8:07:
                    ce:2d:b2:91:e6:00:f1:9c:db:49:d5:d2:b9:f6:a5:
                    e6:53:d8:df:40:2e:ac:9e:44:2b:1f:c3:e0:b9:e3:
                    47:ba:31:6c:b7:57:d9:b9:dd:08:47:0c:eb:e9:99:
                    e5:6a:cc:95:35:23:2f:25:36:a1:48:32:a7:a8:af:
                    ae:b6:11:d6:53:f7:18:f8:db:8e:10:2b:d9:23:f2:
                    fa:15:09:55:cf:4f:77:81:2a:9d:34:85:30:97:45:
                    47:16:ff:93:2b:b4:62:99:b8:0a:48:a2:88:af:59:
                    94:ca:b4:30:1b:80:38:58:35:0c:94:9c:98:f8:1b:
                    2c:c9:33:b6:2b:bd:5f:37:a0:14:66:5d:d0:8f:0e:
                    3b:56:63:6b:53:38:9b:0e:38:ec:52:0d:90:03:21:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:12:BB:B0:13:2E:07:25:6A:2B:FB:9A:BD:A6:E1:6D:E7:F5:06:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86fd92b-29a0-3607-ac8c-48528982eb39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b208::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e3:c9:f7:93:f2:ff:30:98:48:98:d6:c8:47:70:8d:51:40:
         d9:ac:b8:64:d9:1a:d5:b9:6d:b6:e1:d7:69:2f:ce:ef:e2:5d:
         48:38:50:c1:03:66:b1:95:92:55:82:3a:13:78:8c:83:cc:c9:
         f8:85:52:b9:b2:37:c3:da:c3:83:46:e8:a4:c7:bc:ab:88:ec:
         49:56:b9:c5:91:bb:93:d8:74:6c:9c:39:e0:df:c3:57:2d:8e:
         5e:38:a2:77:89:95:da:fa:2b:07:5b:ae:e8:f6:64:c9:42:16:
         48:62:ba:16:db:22:7f:c7:60:5a:e4:90:3c:d3:36:c0:4c:f3:
         3c:11:1b:b1:36:7c:b5:ce:18:9e:63:5a:7e:07:6b:12:4a:69:
         82:65:3e:f0:55:60:d5:1d:6d:77:35:92:70:10:66:79:35:7e:
         58:39:33:ea:ba:c4:e6:da:a1:97:e4:54:1e:b9:54:2e:b4:53:
         5b:01:7f:e6:e6:d8:f3:2b:54:6c:5a:09:0c:75:75:dc:b0:5d:
         46:cb:f1:86:39:7e:95:95:27:25:96:e2:ef:a6:ad:8c:c5:f5:
         a4:41:d4:9e:f5:70:23:52:c5:4e:21:17:62:c7:d0:81:84:11:
         f1:53:bf:56:96:07:9c:a5:98:72:65:11:27:a2:60:b5:2e:b9:
         6b:ba:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:19 2025 by rpki-client