Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
File:                     d6ae0673-db51-38d2-9be1-4015979986d1.roa (raw, json)
Hash identifier:          LwsZJbnCZ50xTlNr1jrujVhfYdxqlb1tLyFePErVghk=
Subject key identifier:   77:B1:7B:4B:8C:42:91:72:8F:33:38:77:D6:C5:04:7B:62:5E:7E:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A11792354D540A3AD393400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1011:a03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:79:23:54:d5:40:a3:ad:39:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=7332e967-76f2-4250-8a39-27e2014207f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:66:13:56:6d:5e:02:55:e6:53:4f:98:de:
                    9a:d9:ef:73:e1:29:49:e1:f9:a9:dd:93:10:cb:d1:
                    e9:8e:bd:ae:29:fe:5b:a8:cc:dc:a0:19:40:28:db:
                    de:7c:7f:e8:ab:5b:b4:ea:5a:0a:3d:02:e8:b6:71:
                    ec:d2:27:24:4b:92:07:9e:ed:4f:30:31:25:ac:40:
                    fd:99:75:1e:04:3a:14:e2:c7:fa:07:87:0c:99:2d:
                    89:0b:d6:10:cb:3f:f5:ac:41:30:3a:b9:ae:95:8b:
                    3d:6c:d2:87:47:39:5a:f9:3b:cd:01:e6:74:5d:78:
                    73:c9:32:6f:26:9a:dc:9c:a3:c7:1c:d7:0f:87:d9:
                    8f:06:3c:56:4e:7d:7b:94:4a:24:e4:52:c8:8a:2c:
                    c6:77:23:ee:7f:6a:0f:d7:b9:76:04:ae:4b:e4:b8:
                    a0:4a:46:2c:c6:0d:0e:22:12:54:4f:94:06:d1:24:
                    99:f0:64:17:af:f3:05:91:b2:74:f6:7e:5a:0a:b9:
                    f6:b2:4a:ed:cb:c6:7a:e6:0b:51:95:7d:68:f8:a9:
                    3f:e4:68:5a:13:58:99:50:a1:88:48:f7:0e:36:71:
                    1f:1c:0b:2b:9f:1d:32:5b:89:62:8d:35:ee:bf:c2:
                    51:fa:a5:95:58:6a:33:df:86:a1:63:82:77:0e:8a:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:7B:4B:8C:42:91:72:8F:33:38:77:D6:C5:04:7B:62:5E:7E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:96:6f:27:2e:51:95:5c:73:11:f5:af:fc:c3:e9:a3:96:
         2c:22:b5:2d:3c:44:bf:5e:63:e8:3c:6a:6e:a2:a9:94:db:20:
         07:cf:cb:e1:77:30:ba:e9:50:e7:c4:93:b3:38:d0:52:a5:70:
         b2:f1:e4:53:26:8a:17:43:1f:c0:a9:2d:f7:23:30:86:f3:62:
         2c:7d:99:73:44:3c:5b:70:3c:f0:e0:5b:0f:f0:c4:6b:f6:c1:
         20:9e:98:04:8e:67:15:3e:08:91:0a:38:20:d6:25:f4:c5:b8:
         62:06:0e:51:4a:49:60:a2:c2:d6:46:93:65:26:ae:17:2f:7a:
         13:ca:e4:e8:3d:85:97:a2:f8:f9:c6:63:83:da:82:56:be:2e:
         c2:7a:8e:3b:65:57:11:87:e3:6c:dc:94:e2:da:9d:d3:b0:1d:
         9d:1f:c7:29:13:42:67:6a:5c:12:2a:eb:68:ab:96:ef:1d:c7:
         54:a7:2e:fd:29:40:89:49:7f:a0:7c:ea:f7:8a:a2:af:16:94:
         63:77:e5:0a:9f:10:61:de:8f:52:3c:f9:26:be:4f:15:00:54:
         2a:6e:b6:a5:25:c3:81:7f:bb:62:00:89:68:1a:c5:74:25:f9:
         b0:e9:f0:a1:0c:da:48:c7:25:8e:8b:ec:7f:ea:72:c1:12:14:
         5f:9d:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:50:53 2025 by rpki-client