Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
File:                     bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa (raw, json)
Hash identifier:          i+MAl0+KUn9XXrU/Z1muL69ugDky7S7NjAYBmmhtREc=
Subject key identifier:   6C:45:89:90:F9:0F:D9:3E:37:9E:49:57:24:0F:40:79:32:C4:29:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8000A6FDEC36168B6B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:bf18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:80:00:a6:fd:ec:36:16:8b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3e4bf0a4-9e02-4617-956a-cf524b888c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:b7:31:3e:f6:90:9f:ec:ad:ae:ef:cf:ba:
                    77:25:78:37:77:af:0d:13:30:3c:b4:b7:7a:5d:7c:
                    98:54:a7:95:c3:8d:ee:f2:90:86:c0:90:81:0a:70:
                    0d:50:c3:e8:ed:8e:88:b5:3a:21:e3:73:59:df:44:
                    bd:a5:35:e2:0b:d9:ef:b9:8f:62:62:48:e5:08:9f:
                    dc:35:a3:80:c8:7d:7f:c9:c5:43:ea:60:33:43:e0:
                    f1:d5:01:6f:a5:fe:de:9b:46:71:68:bf:e2:cf:35:
                    76:e1:7f:ef:50:dc:83:be:83:61:a9:68:be:ca:ea:
                    a3:05:a4:c9:4c:0b:7c:1d:85:fe:60:d0:7d:5f:c0:
                    72:d0:a8:d9:3c:ba:59:8a:c7:58:8e:f1:34:30:19:
                    cd:72:8c:c5:d5:dc:55:1b:b1:6f:3c:70:bc:1b:06:
                    d5:38:0d:dc:72:2a:c2:8d:f1:cb:b0:31:46:08:4e:
                    25:ad:22:a9:0c:4a:d0:cb:f9:e4:28:73:d5:1d:2f:
                    ea:53:b7:c2:2f:f9:a7:99:50:71:05:af:c3:02:df:
                    df:61:aa:ce:70:fd:6f:76:cb:81:38:e1:94:8e:0e:
                    4e:3b:8a:b1:97:01:16:75:52:5a:59:ad:f5:a0:94:
                    2e:35:40:46:c7:75:71:5e:2a:1d:21:6c:2a:1b:d0:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:89:90:F9:0F:D9:3E:37:9E:49:57:24:0F:40:79:32:C4:29:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:97:71:cd:5f:41:aa:b7:35:31:67:d4:e6:65:20:07:18:
         22:2f:74:59:97:2b:46:8a:aa:e0:e5:96:5f:eb:8c:db:a2:3d:
         f2:cd:12:11:c8:21:7e:63:9b:44:60:c0:3e:41:c4:94:ef:e2:
         70:c2:65:8f:85:ef:b3:28:22:83:30:dd:38:35:16:a1:ac:d9:
         be:fe:d0:84:48:fa:72:17:cd:51:1a:0d:03:eb:3e:22:ce:b6:
         25:e7:7f:4f:41:16:f8:ce:ae:12:3b:8f:a6:44:20:40:30:92:
         13:fa:fa:94:52:b8:2f:6a:1f:a0:9a:a0:dc:39:15:9c:ee:73:
         c9:0a:6b:af:89:5a:fb:12:b2:7a:84:83:e1:a6:3d:2d:f7:0e:
         d0:c6:76:8c:da:37:31:4d:ce:29:a6:54:b8:5f:c3:fc:cb:07:
         35:47:04:db:e4:aa:fc:06:dd:5b:e0:4b:6f:e5:5d:59:ff:04:
         50:06:1c:4c:b1:91:4f:1d:84:49:6b:fb:b4:55:a4:a3:4d:88:
         34:2b:20:61:95:ac:5a:bf:53:39:9c:49:6d:31:e0:0a:68:47:
         d7:0d:c1:44:06:ca:de:6b:98:80:f2:2d:8a:65:25:c5:eb:06:
         6f:4f:be:a8:94:7b:be:a1:9e:36:7a:6c:60:b6:b5:73:a3:aa:
         d7:29:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:30 2025 by rpki-client