Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa
File:                     d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa (raw, json)
Hash identifier:          swvLal3q6kRj5shVvFtxAc6N557Z7kOjcNxEZlggSec=
Subject key identifier:   8D:C4:C2:CF:1F:8D:53:EE:DE:F2:F6:98:C6:B0:0C:43:D4:52:6F:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C946E4F3EC7C8DEB5E900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100b:d010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:94:6e:4f:3e:c7:c8:de:b5:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=ba587332-dda8-4bfe-a496-2f75246cdb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:66:23:cc:8f:b0:62:65:33:50:08:a2:6e:
                    9c:a7:7a:21:aa:73:2b:4d:2a:53:a5:1e:69:34:60:
                    de:a2:82:42:b3:5e:e0:f0:85:87:dc:5b:b6:a2:4a:
                    22:b6:77:22:91:94:da:24:fa:c0:39:27:07:49:cc:
                    0d:66:5a:06:44:0b:44:61:1a:c9:8d:94:8d:20:bd:
                    b2:56:32:04:ea:c0:91:77:5f:48:b0:80:22:b6:22:
                    81:6d:8e:14:15:60:8c:af:84:ea:89:ff:59:a5:27:
                    9b:30:f8:25:d0:f4:75:43:04:bd:21:14:52:de:c0:
                    f6:56:9a:48:57:0f:3b:30:13:c1:af:c7:08:b2:09:
                    d5:44:4e:77:31:cf:5a:3a:5c:d2:de:1c:99:3f:7c:
                    7d:5b:53:70:e4:58:2d:7e:da:c2:d1:d3:4b:b6:72:
                    2c:8f:2b:f1:82:c6:07:53:80:86:91:68:57:c7:31:
                    2f:fb:0e:5e:f6:0e:af:1c:de:f0:75:5e:38:15:fb:
                    42:f8:69:86:8a:62:1f:ea:19:55:7b:b2:5e:2d:9c:
                    2b:7e:5f:2e:b4:b9:92:09:5d:03:d9:63:91:95:90:
                    c7:81:9e:c3:75:a8:ff:02:35:db:bb:d2:5f:52:92:
                    ec:88:65:af:48:70:4e:23:4a:92:df:0b:87:ce:aa:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:C2:CF:1F:8D:53:EE:DE:F2:F6:98:C6:B0:0C:43:D4:52:6F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:cc:11:30:9e:7c:50:5f:71:61:6d:39:14:70:0d:cf:89:
         d8:69:96:5b:01:c0:7f:e2:5c:5b:aa:aa:81:f6:e2:cc:1b:d4:
         28:bc:5d:ac:76:21:11:28:b0:a5:ad:43:c3:91:59:75:c0:00:
         9c:ef:b9:e1:bd:35:09:1c:04:5c:18:73:d2:1e:50:2c:a4:54:
         3f:96:3e:62:0c:ad:e1:03:59:8f:5b:37:f0:94:75:53:85:04:
         1d:73:73:c2:ec:98:8e:a6:23:5a:57:59:39:fa:2f:72:e5:b9:
         e3:1f:49:3f:04:b9:8c:63:03:32:e8:49:e1:8f:3f:1b:7a:c6:
         58:88:7b:59:87:c7:c4:5b:99:0b:1c:f1:a2:56:e1:25:e8:f6:
         b5:ae:57:2d:ed:fc:23:c5:38:80:28:06:34:42:bf:68:ff:e8:
         00:64:1d:00:34:73:6a:15:1c:65:f0:1f:f7:d1:71:0b:57:40:
         be:be:39:ab:e1:94:d2:51:c2:4b:1b:d5:a8:41:be:08:63:7a:
         9f:a9:4a:1f:e3:7a:21:2a:47:64:0a:e7:4c:a9:1e:a6:6b:4e:
         fb:45:cb:b7:7f:e4:7e:4b:27:fd:f4:d1:5d:7a:48:76:3e:03:
         66:b7:2b:82:36:69:d6:25:03:56:3f:f5:6e:71:f7:f2:7f:52:
         53:bd:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:18 2025 by rpki-client