Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0366b0-5f77-3f92-9681-ea2ed950d9cc.roa
File:                     db0366b0-5f77-3f92-9681-ea2ed950d9cc.roa (raw, json)
Hash identifier:          kkdV22pswZOGHA0x52+daB0mqvv9aKWYeCe4VomQF8s=
Subject key identifier:   80:62:3D:2D:E4:67:D5:1D:78:2C:BA:B5:AF:F1:F7:75:97:D1:0B:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EED27F4114FE87873180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0366b0-5f77-3f92-9681-ea2ed950d9cc.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:a131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ee:d2:7f:41:14:fe:87:87:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=4f5880a1-d73a-45e0-8716-06e87637d5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:3e:0c:5a:a0:7d:2f:e5:e5:e9:03:10:86:
                    ee:7d:11:86:58:02:f1:de:e3:c2:dc:7e:72:ca:b7:
                    dc:5e:0b:31:e8:e3:de:1f:88:0d:3f:eb:b6:5d:8c:
                    a7:20:21:ad:3d:b1:d5:43:f1:45:9d:2e:11:18:d5:
                    0b:21:ec:62:b7:de:6e:44:04:1c:fe:bd:8d:81:26:
                    24:d4:67:81:96:ad:01:ba:86:2d:17:ff:f3:19:6b:
                    a6:cf:4d:1f:fe:88:d7:b8:a2:ef:31:5c:e0:eb:91:
                    87:b7:83:3a:5c:dc:a4:46:42:15:b7:cb:c8:a3:fd:
                    3e:b5:f5:ce:00:74:1b:6c:98:a1:4e:a6:c1:08:05:
                    d0:80:2a:52:1d:68:ce:8e:06:d9:31:10:85:9e:be:
                    a3:80:4d:1c:6f:2a:38:65:90:65:f7:01:ec:ad:02:
                    ea:47:e7:f2:ea:f5:e4:73:1f:ae:57:3a:da:7b:3c:
                    ab:ea:ef:8f:af:3a:66:a3:9e:80:b8:98:94:bd:d1:
                    18:e4:a8:04:94:5c:49:45:63:3f:ad:a5:4d:7d:b7:
                    5b:4a:f5:1e:e9:bd:03:15:2c:ef:83:45:34:ce:f8:
                    48:56:ae:1e:10:63:89:1a:9b:16:b9:ba:c5:e3:c7:
                    52:90:0f:17:44:93:78:71:82:4a:79:ca:72:12:2b:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:3D:2D:E4:67:D5:1D:78:2C:BA:B5:AF:F1:F7:75:97:D1:0B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0366b0-5f77-3f92-9681-ea2ed950d9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:34:a4:bd:c8:65:01:eb:ad:c8:3c:84:82:7d:99:ef:6b:39:
         f3:c4:3d:ee:ab:9b:6c:07:7a:b6:97:6f:55:71:02:05:f5:f8:
         cf:2b:1f:2d:59:f3:4c:3c:5c:59:2b:68:58:61:72:a0:e1:a9:
         fd:db:7b:0a:c2:14:d3:3f:9f:9e:11:92:76:29:70:65:94:68:
         6a:4c:5c:c5:1f:1c:7c:b7:89:80:89:4f:dd:d6:a8:f6:c3:aa:
         bd:f7:7f:e7:ef:be:c0:bc:ae:ce:c7:b3:1b:ba:9c:b0:98:60:
         20:fe:24:b3:f8:65:2c:c7:d9:31:dd:ca:11:2a:69:4e:8f:c4:
         93:cf:e1:13:18:4d:0b:9d:a4:d5:71:9a:14:70:49:74:b8:91:
         ce:97:eb:ae:37:db:0d:ed:bd:35:86:3e:27:4f:2f:95:a7:94:
         49:e2:48:02:9f:63:e2:1a:d1:d9:a5:a2:54:e0:9b:c5:5e:4c:
         bd:a8:b5:9e:69:13:5b:c7:8c:b3:b2:ed:55:d0:ba:c3:be:e7:
         8c:42:e8:ef:bf:a2:e2:e5:b2:91:fa:9f:2d:f0:de:b7:59:66:
         c0:72:06:96:ae:50:57:70:30:24:a9:0b:43:c1:03:50:41:61:
         e2:c8:57:c5:52:ef:39:c6:f0:b2:ec:8e:7f:cf:ff:4e:fe:cb:
         90:e8:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:33 2025 by rpki-client