Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d711255a-fe2d-3035-a6c9-d26032019b6c.roa
File:                     d711255a-fe2d-3035-a6c9-d26032019b6c.roa (raw, json)
Hash identifier:          xpDI9qTUgQyFKWIN2ztxQHDIWfnASHTLHL6oJBiK4cY=
Subject key identifier:   DA:E2:63:15:9C:5A:14:59:19:40:AC:26:0B:88:40:6F:9E:0D:BF:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFC1BEBA19F57403F209F6580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d711255a-fe2d-3035-a6c9-d26032019b6c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:a113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:eb:a1:9f:57:40:3f:20:9f:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=81e65eac-136c-46ea-8695-fe8f4499a1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:d6:45:af:fe:9f:4e:15:71:a5:ea:68:24:
                    c4:30:29:bf:5f:de:f4:8f:de:7f:7c:9e:51:1e:54:
                    a9:88:32:5b:82:90:05:f7:fc:9c:54:0d:81:7f:c7:
                    42:73:3e:10:eb:ec:cc:83:2b:00:0c:7a:0a:69:e0:
                    53:9e:be:98:1b:35:63:68:07:f1:22:1e:5f:ac:5e:
                    85:d6:38:53:e7:28:e5:c5:ba:86:bb:a6:19:5e:21:
                    69:c2:48:b3:27:df:4b:39:a7:5a:4f:7d:25:51:87:
                    14:0e:69:2c:aa:8d:95:ba:b8:ba:0d:5d:ce:ea:67:
                    ca:49:dd:93:35:18:ec:71:8e:a9:2b:80:3a:cf:be:
                    d5:53:42:24:5e:d6:4f:d2:3c:b0:77:37:0b:b3:e8:
                    71:9c:3b:10:12:08:fa:46:ca:65:23:6f:36:d4:df:
                    79:64:f6:00:36:6c:b1:80:ec:1a:f8:b8:96:a1:81:
                    06:a5:4d:7c:42:c0:42:f9:fc:8a:85:56:e0:90:a5:
                    f5:65:cc:d3:46:27:fa:99:16:15:28:a0:c2:4a:ef:
                    55:11:cd:05:59:a9:bc:61:d7:30:4b:4d:c0:79:5c:
                    b7:89:64:62:27:9e:d9:a1:75:40:85:aa:ad:6f:17:
                    f8:52:ef:e4:a7:26:fd:74:8a:7c:20:99:d3:db:41:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:63:15:9C:5A:14:59:19:40:AC:26:0B:88:40:6F:9E:0D:BF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d711255a-fe2d-3035-a6c9-d26032019b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a113::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:b1:82:fb:8f:78:4f:e6:a5:14:95:03:4e:14:6e:ca:5c:
         10:ce:fa:fc:52:44:58:25:41:d1:93:31:d1:af:3e:75:fa:a8:
         9f:a2:94:04:c6:00:50:6d:0c:fb:6b:c8:02:d6:72:0c:1c:ca:
         7f:74:d6:a4:c0:9d:64:45:8a:4d:9f:a1:33:da:da:fc:8a:92:
         3a:bb:3a:56:8e:2b:2b:bc:47:9c:4f:1b:e1:3c:6f:04:aa:db:
         e9:f2:23:f0:37:fc:d9:72:1f:6f:24:04:0d:53:28:4a:82:20:
         19:10:08:c2:31:32:67:27:cc:be:07:bf:68:5b:2a:c2:e5:f8:
         fa:13:c4:21:54:9c:4e:78:0d:78:03:a0:93:99:02:50:49:98:
         ac:5d:c3:d4:b1:4a:c8:8c:43:7c:ef:95:18:21:45:f3:b1:6c:
         3f:11:b4:18:99:20:7d:a1:9e:33:58:94:e3:87:da:1f:38:6a:
         9d:15:78:c2:95:71:20:45:27:a7:1a:22:1e:1f:c1:3d:09:ad:
         bc:9b:2e:6c:62:00:39:a6:6c:a9:5b:17:2f:d6:ec:47:96:68:
         51:c8:1f:1c:7d:a1:ab:11:cf:61:53:a0:31:e1:16:a0:d7:28:
         f0:28:2f:03:2a:b3:28:33:27:f4:3f:15:0a:13:21:31:bd:de:
         86:4e:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:22 2025 by rpki-client