Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a4be11-dc90-3ba8-950a-a94b19a9cd48.roa
File:                     d0a4be11-dc90-3ba8-950a-a94b19a9cd48.roa (raw, json)
Hash identifier:          zJIl2quQN0j8EExI0/xxUGpBgGHss4v7lRuJJ00xpEs=
Subject key identifier:   62:25:1A:AD:C1:33:FF:88:5C:6E:7D:1A:E6:E5:7F:F8:4F:9F:E0:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1EB314F6A2AD5C6617200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a4be11-dc90-3ba8-950a-a94b19a9cd48.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1001:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:eb:31:4f:6a:2a:d5:c6:61:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d79dd364-0f6b-45fc-ac47-696797222f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:e8:05:a5:1d:e5:71:fc:06:e2:16:6f:0a:
                    d9:fc:16:5a:4e:eb:28:82:23:02:3a:39:4a:b6:d5:
                    ab:59:37:3e:2b:97:0e:95:f4:99:ed:db:e0:1b:23:
                    28:01:41:bf:b6:74:7e:1e:d2:61:41:d4:45:20:97:
                    ff:4f:c0:99:e7:b0:4c:4f:e5:dd:09:d1:25:cd:b9:
                    e2:df:29:9c:24:bd:07:cc:3d:91:f9:ff:67:51:24:
                    72:8a:93:97:67:2f:63:57:8b:87:26:e1:16:c3:3a:
                    74:83:9b:fd:47:35:45:7d:64:db:56:35:13:04:3c:
                    bd:08:eb:02:cf:73:0c:49:bd:ba:64:72:10:9d:b3:
                    be:60:c7:db:a3:4c:28:e0:fd:e8:6a:6e:97:2d:45:
                    d0:6f:35:c7:44:6c:82:8f:5f:22:cd:e9:07:44:4f:
                    b5:09:36:d3:e9:2d:42:72:ee:96:ca:f2:d4:6d:1c:
                    b6:17:dd:99:14:9b:54:01:3c:bf:88:cc:8c:6c:a4:
                    5d:2c:9b:9b:fb:dc:22:fc:a3:ce:fe:50:bc:18:33:
                    ea:49:e0:c8:f4:65:55:2a:7c:e9:d7:4c:ed:08:1c:
                    fd:f1:8a:7d:c3:8b:55:f4:de:a4:b5:31:10:d0:43:
                    90:14:44:6c:65:99:d3:d2:3b:bc:21:d8:11:4d:7a:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:1A:AD:C1:33:FF:88:5C:6E:7D:1A:E6:E5:7F:F8:4F:9F:E0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a4be11-dc90-3ba8-950a-a94b19a9cd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:35:26:26:8c:dc:cb:db:02:39:96:9b:66:97:d5:b5:6e:00:
         eb:85:39:2e:de:0f:df:a6:0a:0e:08:ea:61:aa:31:2c:f5:59:
         44:c2:f4:f1:b1:81:d7:cf:0c:84:03:1b:1b:1e:d9:8f:c5:d6:
         c1:04:e6:26:cc:bd:e8:ce:1e:d4:da:b3:bf:37:28:ce:4d:1b:
         9b:3f:f5:a3:23:f6:2c:5d:20:2e:58:72:57:00:84:5e:1a:bb:
         58:8a:55:6e:c0:9a:dc:9c:ad:94:a8:b2:46:ec:7d:4d:be:4b:
         c0:86:b6:d2:80:93:fe:b5:bd:49:37:1e:53:e5:d2:68:1b:c2:
         30:4b:db:94:32:fa:75:3b:3d:5b:1d:97:c0:d9:03:ab:84:9c:
         39:2e:62:86:ec:bf:de:84:e7:8e:93:ca:e5:c2:35:be:d4:26:
         f7:2b:aa:95:35:0c:91:49:fb:7f:34:66:b4:2e:2d:cb:38:8c:
         2b:10:6a:7d:66:db:b2:db:b9:87:db:3e:f7:d3:9b:6b:f0:a1:
         bd:5f:a8:9b:25:b1:30:1b:e4:98:2c:3e:f2:38:b3:6c:a8:c2:
         4f:89:02:eb:0b:91:6f:81:0e:97:c0:63:9e:f1:3f:b0:0f:d6:
         a1:9f:a2:8c:32:7b:4f:66:56:81:1c:87:e9:5e:05:cf:e7:e4:
         b7:be:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:53 2025 by rpki-client