Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9253e79-9b89-3f51-bfa5-7c6839c32430.roa
File:                     c9253e79-9b89-3f51-bfa5-7c6839c32430.roa (raw, json)
Hash identifier:          RiF3AKYz7DftpK1je6HzAXRpUJPzbMkSkgc1AiLMW3c=
Subject key identifier:   62:B9:50:69:49:B0:2E:89:2A:8A:5D:AD:D2:12:BB:B5:9E:3E:7A:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20864DF2095A7A2209740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9253e79-9b89-3f51-bfa5-7c6839c32430.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1017:a8f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:08:64:df:20:95:a7:a2:20:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=542bd531-2d11-4b15-b8dc-90a495047596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:76:b9:7c:cf:cc:14:24:ea:a9:11:73:7b:a0:
                    1d:dd:14:a6:f5:e0:d1:4c:02:2a:bf:c1:df:bb:d0:
                    39:5a:c9:d3:cb:8b:94:84:80:60:78:ae:13:14:f2:
                    16:db:a1:ab:07:95:3d:3f:77:2a:1a:e4:a6:3c:c3:
                    53:74:b7:c5:df:13:64:1d:a8:c9:6a:40:2a:f3:b3:
                    3a:01:c7:ea:61:5b:27:0b:46:54:f3:05:43:5e:25:
                    bb:34:66:5e:80:e5:af:f1:0d:b4:91:4a:b4:c7:8a:
                    b5:f1:42:aa:8d:9e:7f:ea:d1:03:7f:a5:11:49:64:
                    34:f6:be:79:4c:4c:b2:48:1b:61:08:6e:e6:b4:2c:
                    e3:c0:13:97:a4:df:5d:f6:b0:b4:28:bb:d8:cb:a3:
                    6a:68:64:97:ba:de:3e:0e:42:58:c3:f3:2e:ea:ac:
                    3d:82:c1:2c:b3:ce:62:4e:5f:49:d1:ef:57:9d:6f:
                    c7:43:86:bf:cd:6d:8a:2c:9f:7e:a3:37:4c:2f:4b:
                    ac:b9:b8:cd:27:5e:a9:39:04:ec:33:36:8c:cc:70:
                    37:32:14:4b:fe:02:49:c6:f0:82:74:10:a7:7f:71:
                    ad:7a:1c:89:5e:5f:44:8e:b7:a4:b7:c0:f0:9a:e8:
                    ed:63:56:66:46:3d:12:52:dc:76:5b:be:89:03:9b:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:50:69:49:B0:2E:89:2A:8A:5D:AD:D2:12:BB:B5:9E:3E:7A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9253e79-9b89-3f51-bfa5-7c6839c32430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a8f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:4d:5b:dd:71:cb:4f:84:d2:32:5c:87:82:61:f7:fc:e3:
         15:92:39:fc:08:52:38:34:8f:02:e4:15:a6:ef:d6:b1:25:92:
         29:c2:04:83:69:1a:e7:bc:26:3d:11:1c:47:88:ae:10:33:12:
         d8:b7:fd:2e:b9:40:48:fd:24:a2:c7:48:82:37:ae:2e:0b:f4:
         76:24:47:56:c5:43:de:1f:57:3d:01:0e:a1:1e:86:dc:98:98:
         49:42:14:d4:28:5b:42:b0:46:cd:68:0a:32:73:9d:e3:cc:6a:
         c9:16:37:e6:f7:36:ef:30:ed:f9:5d:65:53:fb:99:38:70:15:
         6d:33:bb:a6:9e:79:06:0f:20:3e:11:01:61:c2:d5:7a:48:da:
         3d:d2:72:a9:0f:f8:8e:7a:ee:b2:ce:f0:fb:71:ba:a5:61:fc:
         56:e1:f4:5f:6b:b1:11:1c:28:84:ab:05:61:26:c1:22:32:f8:
         ad:a8:51:22:27:92:18:36:ae:f3:57:4e:41:67:65:77:03:1b:
         af:83:6c:fc:63:6d:ba:c1:f5:ec:bc:18:e9:be:18:de:47:73:
         c7:e2:9d:d1:0d:17:29:0b:b4:77:d9:6d:dd:f2:a7:34:07:94:
         d8:e9:bd:95:06:85:12:9f:88:ee:f2:97:0c:b6:64:88:b9:0f:
         71:4a:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:16 2025 by rpki-client