Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea55fcff-afbe-3338-a6cd-b9b9fee251c4.roa
File:                     ea55fcff-afbe-3338-a6cd-b9b9fee251c4.roa (raw, json)
Hash identifier:          1L0i2PYNrRZRFzXsWnDrSHM5zVZNb5TYB9bmMLLkpko=
Subject key identifier:   CD:5D:D4:0F:4A:B9:0A:20:85:D0:51:A2:1A:F7:5F:0A:65:42:9B:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371F55808AF16620773B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea55fcff-afbe-3338-a6cd-b9b9fee251c4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:a110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1f:55:80:8a:f1:66:20:77:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=64dcbf2f-db04-4fe2-96a7-cb4de257ed42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:fe:82:bb:e6:4a:0a:ef:5a:ca:da:ad:21:
                    31:8a:60:9d:d7:23:e8:0c:3a:38:fa:ae:17:45:42:
                    ee:2b:63:cd:32:ff:e3:41:08:23:2a:9c:24:5e:af:
                    24:a3:a6:87:22:88:e2:53:4c:8d:dd:19:45:a4:0d:
                    63:c6:a6:32:a4:19:66:64:02:4d:b3:08:4e:33:b2:
                    8f:82:7c:62:4d:9d:fa:b9:31:9d:f1:c4:30:75:80:
                    46:68:f4:0f:80:8d:bf:82:9e:bc:b3:39:5d:cd:06:
                    e8:c9:46:de:97:c7:8f:91:7c:3e:69:b1:4f:55:6a:
                    a3:4a:82:85:70:d0:42:76:df:c8:7b:7c:a5:a3:95:
                    99:e8:84:0c:a7:5f:c0:2b:82:e9:b6:ab:f0:3d:b1:
                    ce:0f:dd:38:28:29:84:1b:fc:74:94:10:c3:5c:f5:
                    1f:79:52:e0:a8:84:f8:d7:c4:63:ad:33:b1:ba:7f:
                    32:7a:29:0c:4c:ec:32:a8:0c:f2:bb:35:fd:ae:d1:
                    ca:e4:43:74:99:41:26:18:79:f1:97:00:f5:27:0a:
                    8b:46:28:b5:f3:98:02:23:47:37:66:5c:32:05:01:
                    28:fd:78:46:9a:59:7e:39:4f:a8:09:77:fc:7e:89:
                    62:f9:21:5c:3c:73:d0:4e:55:78:bf:65:60:53:2d:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:D4:0F:4A:B9:0A:20:85:D0:51:A2:1A:F7:5F:0A:65:42:9B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea55fcff-afbe-3338-a6cd-b9b9fee251c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:f4:76:fc:51:1e:29:76:8b:e2:24:32:b8:62:9f:3d:06:
         40:9e:79:d8:d3:aa:e3:0c:49:55:d9:70:e7:a1:8b:26:c1:ac:
         27:5f:74:41:fd:1c:71:d5:a8:fa:fc:56:c5:1f:ba:e5:bc:02:
         53:16:4d:a9:56:fd:7b:55:4a:45:8f:20:c6:23:cb:24:47:c8:
         14:04:76:80:78:91:19:48:40:ec:5d:ee:ed:49:f7:64:93:a3:
         d8:d8:51:34:7e:4c:5b:c2:46:ef:70:59:6d:25:0e:24:63:93:
         84:3b:c6:d7:79:dd:d5:da:a6:30:b2:61:96:68:cc:d1:52:a9:
         b8:51:b7:81:d6:11:91:0d:d0:90:90:cf:10:04:6e:42:3b:c4:
         df:50:c2:8a:4a:8c:4e:8f:1a:ea:68:a7:be:d6:f1:ee:7c:02:
         ef:10:39:59:a2:55:f4:9f:8d:ae:af:c0:7d:dc:92:60:e4:31:
         16:6d:9e:e8:8a:bc:b2:90:2c:32:2d:39:a4:1f:8b:0f:27:e6:
         29:48:51:7f:e2:e3:bb:09:c3:41:c4:cc:46:5e:cf:96:d4:82:
         c0:bc:46:08:f4:87:82:dd:75:c8:55:08:12:df:65:dc:e8:8f:
         83:68:eb:90:9c:4b:22:4e:b0:12:c7:75:de:c6:c0:a4:e6:e3:
         f3:8c:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:29 2025 by rpki-client