Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6fcc2b4-679c-340f-bac9-771c93ab5949.roa
File:                     e6fcc2b4-679c-340f-bac9-771c93ab5949.roa (raw, json)
Hash identifier:          R0jMQgH6LbuqrwDCQOqV80vmz0/p14c/N2H5DsbSnyY=
Subject key identifier:   AC:EC:FD:FB:53:DC:4D:03:D6:E0:08:F0:92:9A:6F:8B:08:5B:BA:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1D8A73608380C09649600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6fcc2b4-679c-340f-bac9-771c93ab5949.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:a0e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:d8:a7:36:08:38:0c:09:64:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=78a68852-9ac9-45ea-996b-49a6e4c8ed49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:00:64:0e:05:6a:9d:60:7c:54:af:f2:b9:
                    de:81:51:77:65:03:54:02:9f:7b:14:32:e3:27:f5:
                    26:25:e4:28:5f:23:fe:fc:ea:6b:a1:7d:35:ec:87:
                    52:08:2b:26:a6:2a:4a:73:6e:a8:5f:c5:12:f7:92:
                    37:52:c3:af:48:59:6c:b5:35:ae:9b:e2:77:19:b3:
                    79:f5:6c:b8:43:7d:0f:7d:f7:84:12:e8:63:a4:e7:
                    7f:b0:14:0b:91:5a:af:7e:0e:ec:08:d7:d5:59:34:
                    0a:72:3f:7f:68:c6:50:24:9b:7c:9f:da:0b:81:c2:
                    41:34:6c:0e:ba:48:2f:20:56:ac:85:6f:a3:24:c7:
                    1f:52:46:a7:9f:cd:b7:28:bb:63:49:3e:10:b3:46:
                    50:57:d8:22:14:37:f5:e4:7c:ca:5d:15:f9:ad:cd:
                    09:01:f3:aa:0e:e5:0b:4b:d9:a3:d9:af:bd:e6:a3:
                    5d:c4:51:de:94:13:fd:5c:f4:c6:a9:d0:05:58:34:
                    46:30:cd:c0:b9:34:36:58:f7:e4:03:e0:6f:ee:28:
                    bb:95:6f:f5:d9:a3:99:5b:f9:62:36:7d:e4:e8:ce:
                    53:a5:5a:43:0c:1c:68:1a:38:5d:9e:e6:cd:15:ce:
                    da:fe:5d:ed:0a:1e:db:6d:6e:f0:fb:58:af:b3:4c:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:FD:FB:53:DC:4D:03:D6:E0:08:F0:92:9A:6F:8B:08:5B:BA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6fcc2b4-679c-340f-bac9-771c93ab5949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:26:10:a8:06:12:6b:01:a9:ae:bf:d5:6a:11:b0:66:71:
         9d:c6:91:88:21:c5:fb:97:d2:82:84:cb:21:1a:85:84:ba:c4:
         aa:6b:8e:71:3d:2e:39:e7:51:c1:12:50:76:bb:db:34:ef:5b:
         95:64:4d:19:41:2a:39:c9:a9:70:3f:d0:2b:02:b9:b5:76:dc:
         35:c3:7b:63:62:ab:8c:a5:6f:77:2d:03:a9:c8:03:2d:f3:91:
         e2:64:e3:0d:20:cc:35:e7:93:c6:46:44:3a:95:0d:9b:72:79:
         28:eb:89:64:68:43:f7:73:41:30:33:9a:0e:94:2c:c6:7d:8a:
         25:67:b9:c4:ad:ac:20:15:14:6f:ac:91:9a:cc:0f:05:16:e9:
         61:86:a5:1c:90:c8:a4:d5:2f:3c:4e:4e:06:e2:3a:b1:80:5e:
         a1:ac:02:2b:29:c2:64:79:ff:c0:a6:74:08:21:e0:1f:ef:36:
         31:3c:4d:50:47:eb:fa:90:42:8f:d6:d6:8f:dc:f4:97:b5:6b:
         49:9f:9b:b4:d3:e6:f7:cd:d6:de:df:81:1a:64:63:db:12:bc:
         7e:ee:85:d6:25:f8:07:08:9a:6b:b5:04:79:1c:fc:b1:4a:9d:
         43:6c:7f:51:e5:95:79:86:1d:15:41:94:53:1e:a0:e0:77:88:
         e9:e2:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:46 2025 by rpki-client