Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
File:                     d4678c89-c355-32dc-9caa-22a3b0d8248e.roa (raw, json)
Hash identifier:          5BHbNUTi9474k/aUCwMD40Jr3HgXjDis56/S03NFgBU=
Subject key identifier:   C1:85:D7:9E:42:03:67:07:9C:EC:44:8B:C1:AF:F5:07:A9:13:B4:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C919C4007F04EDC23A500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100a:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:91:9c:40:07:f0:4e:dc:23:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=bddebf3d-918b-4652-8b0f-3f3de1950fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:24:50:46:33:80:c5:ae:5c:c2:0b:1a:80:
                    d8:bf:4c:cd:4e:84:84:53:06:83:a8:7b:5a:14:91:
                    4f:e2:87:c1:78:94:d7:4f:25:ad:bd:4c:3d:8a:05:
                    a0:03:c3:58:b1:4d:9d:0c:67:cd:56:47:f0:6b:f0:
                    d2:ad:39:50:28:4a:8a:bc:83:e3:3d:2b:0c:40:3c:
                    d9:1d:d7:cf:b4:70:81:61:9c:31:0c:14:50:da:20:
                    bc:4b:8e:41:ee:5b:71:1f:35:01:9c:bd:a8:69:37:
                    38:80:45:bf:93:4a:f9:44:eb:69:3b:35:5b:2a:e7:
                    6a:dd:77:90:f6:58:a5:96:d4:52:22:ec:3a:29:58:
                    f0:e1:2e:0e:68:2d:d1:b2:34:7c:14:d8:ee:8b:73:
                    e7:69:ba:ea:f2:fd:02:26:9e:10:07:fe:d2:fb:b9:
                    a4:57:02:47:1d:96:c8:7a:29:fe:31:29:fb:0b:3f:
                    ab:c9:e3:1e:3c:ca:75:1f:59:1f:01:ce:af:68:29:
                    63:a8:fe:a5:54:3a:84:07:70:10:7c:02:4a:55:b0:
                    de:68:df:94:c5:2d:59:9a:97:68:6b:63:b7:99:09:
                    0c:6e:37:dc:41:f8:a1:c9:b9:0a:8f:60:d1:49:7a:
                    a7:34:fe:12:94:7a:65:dd:cb:ee:11:d5:3c:4c:0c:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:85:D7:9E:42:03:67:07:9C:EC:44:8B:C1:AF:F5:07:A9:13:B4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:43:20:50:b7:38:53:24:15:02:cc:73:65:1b:e7:91:57:bd:
         ba:9a:e0:e6:e0:f6:f6:97:e1:10:2b:2f:74:40:18:78:29:f2:
         7b:92:51:9a:a7:e0:cf:b6:b5:bc:5b:75:6f:74:da:bc:7e:3d:
         1b:ce:7b:e6:45:91:26:4f:66:82:4a:8a:9d:2c:32:e7:b6:c0:
         d4:30:f5:5a:59:94:5d:f1:83:a9:fc:1f:0a:0c:87:4d:68:83:
         56:6e:33:f4:a5:af:c5:3b:e6:76:13:5e:61:f0:bd:73:09:b9:
         fb:35:d4:e7:74:2a:2e:a1:8f:84:bd:19:9f:4d:49:be:8f:c1:
         63:d8:3c:3e:b0:3b:1e:bc:43:b1:4a:30:d0:d1:94:62:45:f1:
         0e:ea:b6:37:39:62:5d:06:4a:cb:58:d7:13:ec:07:9b:6d:48:
         8e:b7:fb:0a:77:90:8c:6b:6c:fc:63:a7:b6:12:94:fc:c3:7f:
         25:ee:b4:88:36:1b:38:bc:12:c8:cf:35:09:da:7d:17:20:c9:
         2b:b6:eb:67:de:67:d8:77:0d:cf:a7:cb:c7:92:6c:78:7d:a5:
         49:46:5f:a9:13:86:0c:27:86:14:48:12:c7:cb:1a:ae:b5:38:
         b6:6e:6c:31:0e:30:bd:82:8d:0b:cd:b4:4c:7e:92:16:29:79:
         d4:3e:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:20 2025 by rpki-client