Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dffad905-00a4-3464-8716-b8df47451741.roa
File:                     dffad905-00a4-3464-8716-b8df47451741.roa (raw, json)
Hash identifier:          cw+irwxxZxlJFVWdCgYAb/CZmaUpf2LwWe6dR49Y/ao=
Subject key identifier:   49:79:96:A7:98:C8:16:A8:D0:E8:B3:D9:34:C5:73:4B:96:FF:B3:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1174FD5F71AE0067310880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dffad905-00a4-3464-8716-b8df47451741.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:a100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:74:fd:5f:71:ae:00:67:31:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=230d8a29-768f-48ee-8174-11c96dc586cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:3d:e4:78:4e:79:3a:6d:88:22:96:8a:63:
                    a4:2a:20:cb:0e:93:0b:00:c0:0b:44:8c:16:0a:46:
                    c4:51:1f:a8:f0:7b:ff:c4:54:e2:6e:c3:95:f5:16:
                    b9:f4:f8:1a:ac:4e:8b:85:7b:7b:6a:e5:b7:7d:c9:
                    e8:81:40:0b:e6:d5:8e:72:e7:81:05:83:b1:bc:5e:
                    26:3b:e3:53:9a:4a:b8:31:4c:c6:7a:e0:b3:b9:7e:
                    30:5e:f3:12:ba:d9:90:00:4c:81:d0:9e:ae:54:40:
                    5b:59:82:00:0c:26:ea:4b:2b:43:1b:a1:2c:5c:62:
                    89:02:64:86:95:74:67:74:c8:c5:a3:ae:e2:aa:2d:
                    ac:15:5d:f2:a0:24:94:57:91:f1:c4:b5:ef:4c:8e:
                    18:84:0b:fa:d5:3a:0d:cd:54:3b:55:af:f5:0c:5b:
                    be:49:f5:c1:a3:da:e1:f7:6a:19:da:8c:f0:fb:cc:
                    93:d3:2f:b9:f6:a0:05:0f:b7:2f:f1:9a:f9:3f:42:
                    a0:5f:55:49:d8:f3:31:f5:e4:4e:db:c1:d5:52:94:
                    48:d8:b2:6f:33:7a:09:04:47:8a:8b:79:26:cc:cf:
                    92:6b:9c:4a:5f:a8:09:25:17:79:04:67:5b:59:4a:
                    62:ae:83:2d:d6:50:5b:7a:d6:cf:de:3e:c4:da:ba:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:96:A7:98:C8:16:A8:D0:E8:B3:D9:34:C5:73:4B:96:FF:B3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dffad905-00a4-3464-8716-b8df47451741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:8e:54:d9:3a:bc:cf:17:17:29:03:ce:29:74:61:55:50:
         9b:62:b2:91:ae:cd:b2:6c:2d:31:de:5c:f9:d6:8b:11:cb:62:
         f1:7a:06:23:b1:24:83:81:bd:a0:5b:22:5e:ca:3e:d5:89:b9:
         06:c8:23:34:2c:49:82:16:98:f1:5e:f1:9d:8e:80:44:20:95:
         8b:c5:85:ce:3c:07:7a:bc:03:66:3b:0b:35:14:77:87:27:b9:
         2a:07:b0:04:86:c7:92:0a:3a:da:83:b1:1a:96:09:43:a1:bd:
         b6:0c:e0:03:1f:14:24:d1:65:df:41:ca:4e:70:f5:89:4a:58:
         ec:da:04:14:2e:d5:93:35:3d:5f:aa:ff:40:b1:f4:97:60:1f:
         2e:d2:c3:02:69:ea:c9:24:db:16:b4:48:72:c4:e0:e9:d3:fb:
         5e:30:0f:f3:e6:bf:d9:4b:78:1e:67:6d:f6:b4:ae:51:ae:f9:
         d6:26:37:3e:07:d7:42:d2:14:66:6e:17:c9:11:fa:b8:61:c8:
         30:47:b9:16:c0:44:56:7f:06:5d:63:64:c6:33:89:e6:15:99:
         f2:5c:5a:77:ac:74:1f:1e:37:b9:f1:cb:38:04:85:4b:d6:79:
         e6:a7:41:ad:65:58:98:93:b8:fa:0f:3f:46:92:a4:62:48:2a:
         97:c8:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:23 2025 by rpki-client