Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
File:                     ba976431-89fa-3a11-9263-5ea18c79a193.roa (raw, json)
Hash identifier:          aWPNBbXAwm3DeS9ACKAvn8BLf5lN2hyKPbYh6jAY9+s=
Subject key identifier:   5E:D3:1D:1A:BE:43:6A:25:42:D3:BD:63:C6:1E:13:36:A3:02:81:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F6B99915C18C23E3DA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1008:b130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f6:b9:99:15:c1:8c:23:e3:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8c907ee2-e90b-48a6-b03d-b785862cc071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:d7:19:cc:92:3f:e6:c8:16:a0:77:b3:b7:
                    a7:69:d6:af:e0:18:3b:3d:0e:e7:e6:fb:5e:fe:b3:
                    d9:e2:b1:8a:46:85:5b:30:5c:c4:b0:cd:d5:ef:c6:
                    0e:e9:2e:be:3a:8f:de:bd:2f:bf:f1:4c:17:24:32:
                    97:62:55:ad:da:ba:1b:64:81:ee:78:a9:a0:bd:59:
                    e6:6b:e5:e9:54:87:8a:b6:9f:c2:77:be:50:f6:20:
                    6c:49:0f:3d:75:7c:f0:48:50:df:17:3d:ca:b4:81:
                    09:79:02:f7:9e:ff:4f:03:ee:1d:3e:d3:c6:9a:9d:
                    76:a1:a1:8d:14:c8:f8:38:d2:81:e7:ff:29:18:4d:
                    e5:d2:8a:af:55:c2:fb:56:9e:db:c9:f5:d5:2b:18:
                    ea:34:dc:93:37:be:4e:a7:cb:ae:4c:c8:95:c7:08:
                    d2:d8:bd:21:c4:82:32:ab:ba:cc:b5:ea:00:01:eb:
                    87:fd:dd:33:67:4a:97:eb:ae:b9:f1:8d:f9:fa:7e:
                    4f:9d:f9:24:a0:32:e3:17:9e:48:c9:b2:ab:c6:80:
                    41:a2:74:d4:94:6b:0c:68:ff:97:4b:46:19:7b:14:
                    7e:a2:c7:d2:84:53:ae:48:bd:51:3b:16:54:a3:68:
                    de:e8:d9:82:e5:b0:63:43:3e:24:33:d8:07:bb:6d:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D3:1D:1A:BE:43:6A:25:42:D3:BD:63:C6:1E:13:36:A3:02:81:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:95:ed:ba:d2:34:02:41:94:b7:d5:87:fa:4f:10:29:c5:8f:
         12:47:cc:35:6a:aa:37:a5:82:28:e0:5a:e3:72:b5:e8:3c:cd:
         84:22:4b:c7:80:13:32:b5:a6:48:d8:c2:76:cf:20:1f:94:2d:
         f4:1a:20:9e:82:1b:89:85:2e:c6:0e:94:1d:57:75:4d:0c:ca:
         6c:8c:e6:56:64:02:05:a2:af:b6:de:08:87:ac:d7:9a:70:27:
         19:bc:8f:9c:ad:f7:9d:cc:79:cc:7e:16:28:a4:51:73:cb:12:
         d4:5e:b9:c9:c0:a2:32:3d:d4:34:f0:d0:ab:aa:25:3d:ab:fc:
         be:6d:96:59:df:e5:cf:e0:c3:58:d9:18:aa:5b:da:64:2c:19:
         1a:7f:2d:8f:2f:83:5a:62:a8:31:8c:c0:95:88:6c:d3:01:e3:
         76:6e:3d:d8:0a:31:44:2a:a6:20:ca:cf:28:e0:b5:1a:0b:f8:
         c2:4b:50:1b:57:ee:bc:84:ef:73:2a:a3:58:4c:73:2f:ec:07:
         49:1c:4e:f8:c5:fe:de:13:b0:ed:68:b2:dc:db:54:46:a0:ba:
         5b:6d:47:b5:15:53:4e:2d:96:be:10:45:19:cf:7d:34:4b:66:
         44:6f:29:75:f9:36:1b:4b:b2:23:9b:f1:e0:13:72:73:e3:31:
         12:45:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:23 2025 by rpki-client