Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e88e08c8-d31a-38bf-80fe-e8b9bac6f7ee.roa
File:                     e88e08c8-d31a-38bf-80fe-e8b9bac6f7ee.roa (raw, json)
Hash identifier:          eWIefZ3x3M2OA5aC8cUZUrQoQqgQ2V6reH/5573GRvw=
Subject key identifier:   BF:A8:33:72:85:D1:67:80:F8:D8:88:5A:95:B2:E7:ED:A5:4F:19:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1177E0CAE1C73FAFDCB100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e88e08c8-d31a-38bf-80fe-e8b9bac6f7ee.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:b1f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:77:e0:ca:e1:c7:3f:af:dc:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=05df3184-c4d3-4e6d-a590-274a4b4d950d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:7d:ff:ed:30:37:18:15:aa:ec:43:15:02:
                    61:14:70:51:df:a4:93:e8:56:62:38:96:8f:9a:06:
                    ae:85:c6:ec:a0:35:31:d5:25:a1:de:f9:10:82:29:
                    f7:d5:10:b7:d5:c0:ab:2f:4d:e0:78:b7:b6:cc:69:
                    e7:a9:f3:73:36:68:c4:b8:24:fc:e1:c9:1f:44:62:
                    fc:60:9f:95:8c:fc:97:d1:51:f4:3c:ef:ae:8e:27:
                    e9:b8:e2:08:6e:43:e9:f7:a5:86:47:bd:f9:52:1a:
                    8e:84:4d:7c:cb:42:0e:52:a0:cd:a0:2b:59:2e:cb:
                    86:7f:6b:58:9f:78:c8:18:d0:61:14:30:b4:e4:7d:
                    02:a4:d3:17:d7:12:6a:36:59:db:5f:54:33:21:76:
                    7a:38:e2:fd:36:07:29:cf:c6:95:db:42:0f:ea:45:
                    bd:4d:0b:cf:55:96:af:06:02:9f:15:1f:86:c3:9c:
                    8b:0c:35:d0:aa:ce:74:a5:e5:75:0b:e3:44:7d:26:
                    6c:48:32:68:1f:99:8c:89:5d:93:0d:fc:84:4b:17:
                    39:d4:a6:d0:fd:58:73:3b:ec:d1:18:40:3f:2c:7f:
                    bd:12:8a:f6:2c:96:ab:f7:6a:40:e8:c9:04:1a:48:
                    62:7d:58:b1:23:a8:7c:ba:67:5e:a2:32:d7:49:ba:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A8:33:72:85:D1:67:80:F8:D8:88:5A:95:B2:E7:ED:A5:4F:19:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e88e08c8-d31a-38bf-80fe-e8b9bac6f7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b1f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:74:dc:06:52:45:92:f0:70:a1:e6:75:f0:a3:58:00:d4:
         91:15:ba:6d:16:fd:1e:a1:8a:37:17:c1:e0:65:58:3c:cf:12:
         cf:1c:b2:42:e6:e4:62:bf:93:da:2b:a9:7e:c6:c5:39:87:d3:
         7f:53:ca:d6:f2:b2:67:f6:9a:2c:85:71:e0:5a:23:bd:36:b7:
         fb:e9:cc:30:6c:ba:97:05:71:b8:e7:5e:96:31:b5:c0:f5:ee:
         64:9e:46:46:f4:a3:c9:9d:6a:19:12:c5:7a:67:f2:6f:d9:63:
         06:87:2d:22:eb:e5:3f:f4:5d:65:75:d8:e2:44:1d:3e:fa:99:
         92:7a:82:2e:7e:89:0c:16:b8:bc:1a:21:d3:f0:2c:2f:f0:44:
         0f:d0:e1:d9:0b:5b:72:4a:46:35:41:16:ba:d0:ad:a3:16:20:
         d5:9b:25:04:4f:2f:a7:da:96:8d:74:39:d8:3a:ba:74:3c:22:
         e0:40:9a:da:d3:67:80:ef:ef:3f:13:55:39:11:50:d9:e1:36:
         2b:53:a6:c8:9f:f6:de:5e:50:04:a0:aa:b2:ef:e5:4b:cf:b3:
         db:6f:74:73:4a:eb:37:e5:5f:da:95:95:f9:7f:66:c6:3c:ee:
         cb:e9:b2:59:57:35:3c:de:88:e7:9b:33:32:20:8d:0a:ba:db:
         21:ca:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:43 2025 by rpki-client