Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa
File:                     c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa (raw, json)
Hash identifier:          YAJqQyDJGfL0S8GM6fR98wTh94ZB4/vmUia4ZJwx5tk=
Subject key identifier:   DC:0E:50:49:BB:0D:69:64:FC:2C:C1:FF:9E:C8:2B:9F:6E:AF:21:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36E808893017EA2CF77780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1002:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e8:08:89:30:17:ea:2c:f7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b972a4df-0789-4ce8-9ee8-f6597605c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:55:82:a1:88:c6:d0:1f:93:78:cb:42:48:
                    5c:78:e5:13:e4:35:f0:a9:53:86:de:8c:67:83:9a:
                    1a:27:30:38:02:08:c2:a8:23:22:92:0d:49:a3:c6:
                    70:cd:1f:11:82:bc:42:bc:d2:13:e3:68:4c:9d:a7:
                    a5:f6:98:07:c2:00:d6:e8:0e:10:ac:3a:23:25:f1:
                    35:d9:f2:51:66:d0:f1:8c:4f:62:c3:79:46:a1:9f:
                    23:f7:62:73:49:8c:ce:d4:a9:89:92:68:ac:2d:ec:
                    89:6e:fa:2e:c5:38:2e:58:ae:86:9d:f7:ea:1d:59:
                    83:70:77:02:4b:45:29:72:47:19:e9:32:9c:ea:21:
                    f8:42:ac:0f:42:8e:54:4a:5a:91:c8:38:8f:7e:74:
                    55:ab:ac:b5:17:65:97:a1:02:e1:1c:e3:30:0e:df:
                    b2:7b:ee:60:3e:40:b8:dc:73:27:16:25:ef:c0:7c:
                    81:4f:94:62:c7:eb:8b:d6:e1:d2:29:e5:3a:5b:bb:
                    27:e8:b5:d7:d9:bc:9b:69:58:e8:c8:e3:41:6b:03:
                    8c:cf:62:6e:6e:fe:c6:61:54:5d:ac:b9:fa:29:06:
                    ad:19:d3:63:92:40:50:81:8c:dc:d0:9a:f4:61:f1:
                    ee:1e:6f:30:1c:21:1c:3b:e4:5c:3c:c3:51:7b:e6:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:50:49:BB:0D:69:64:FC:2C:C1:FF:9E:C8:2B:9F:6E:AF:21:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3c9bbf5-3aed-3fdb-b8e5-df56747a290b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:16:9c:22:c0:dd:c1:9e:af:78:28:5c:bb:b8:0b:4b:ad:
         5a:e2:91:e3:c2:4e:55:8a:0b:f5:5b:a4:5d:28:80:52:47:e7:
         e1:33:d4:ba:ec:f5:ec:46:53:ef:f8:ff:3b:e7:2f:2a:85:3e:
         0d:fa:54:3a:e7:b2:21:ff:6d:17:20:cb:3c:53:30:2c:a6:f1:
         5a:35:f0:e3:f4:eb:5c:40:3c:53:94:a7:d7:2e:95:3b:21:0a:
         9b:d9:ff:95:30:e6:1f:3d:cb:f8:cf:a0:02:ea:4f:d7:c4:91:
         e4:7b:3d:ae:5b:82:f1:51:6e:56:dd:28:ea:7e:e6:d7:6f:2e:
         69:f0:ce:b2:1e:0d:77:34:37:4d:fd:a5:12:3b:89:e2:65:9b:
         39:20:c4:3f:96:5c:d6:08:01:39:68:b3:2d:1d:32:ff:2a:cd:
         11:54:a5:27:87:89:e3:ff:50:6e:cc:36:a3:8d:4d:e4:8d:a7:
         fe:c2:c8:ba:29:75:a1:3d:dd:cd:c2:ab:88:51:bb:ce:f6:da:
         8a:41:fa:06:4c:e5:51:55:f8:44:36:a0:06:50:11:85:d5:85:
         a1:e3:21:4e:40:ee:49:83:65:b5:0a:6a:7d:b4:d0:1e:ef:d1:
         8c:1c:5f:5b:9e:7c:00:f1:6a:66:86:81:32:0f:07:bd:d2:ca:
         70:e7:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:48:38 2025 by rpki-client