Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa
File:                     ec61e7ef-6d0f-3839-ba92-55053ee85614.roa (raw, json)
Hash identifier:          jOTIdaz7sGjXhcPjsQXnQ/dLWxH/15DOFkcWEL/y2Lo=
Subject key identifier:   89:F4:CC:A6:B6:D1:01:B3:8E:42:FF:51:06:EB:9B:0A:7A:06:38:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C372170DF7BC6A6B57517C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:21:70:df:7b:c6:a6:b5:75:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9953d1cd-10e5-4f7e-8127-6b638b00ffa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:4b:ea:6b:9c:69:cf:b7:f4:15:f8:8e:bf:
                    5c:38:c4:c7:7a:9d:2a:67:22:4b:c1:79:d7:bb:37:
                    38:4c:8a:11:02:2c:18:48:a7:44:2c:55:56:39:3a:
                    8d:b0:a3:8a:78:28:31:7b:d9:af:3c:8e:6d:48:f0:
                    99:75:3e:73:59:f8:57:d5:03:ca:ff:51:84:f2:19:
                    c9:cd:aa:bc:8e:0c:29:ef:77:48:e7:de:50:16:d1:
                    f2:1d:af:a4:ee:0d:56:64:1e:26:54:d5:e0:50:02:
                    da:10:38:ae:74:e4:23:8c:ab:fa:13:f2:6b:15:f3:
                    98:4c:8c:e2:38:89:35:d7:d0:fc:b1:36:db:f6:a7:
                    04:ba:12:a7:6d:fa:da:5a:12:64:8d:82:ae:c0:7d:
                    04:be:d3:26:e8:57:14:21:5f:3f:16:eb:bb:e6:36:
                    3f:bf:33:eb:d1:f0:1e:fb:fb:10:bb:74:95:3d:92:
                    a5:29:6b:ec:c3:63:b3:99:40:f7:3d:52:7f:60:1a:
                    bc:e2:44:6d:a7:df:72:01:a0:8a:fe:0e:6d:24:6d:
                    3d:03:f8:1a:b6:18:2a:c8:44:d0:8c:e3:5d:d5:81:
                    fb:9b:78:0d:61:39:af:49:1e:56:03:8e:0d:ca:fc:
                    29:0b:e1:ef:d6:67:4d:42:a8:30:ac:b0:61:f2:2b:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:CC:A6:B6:D1:01:B3:8E:42:FF:51:06:EB:9B:0A:7A:06:38:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:01:7c:13:36:68:b3:5f:c1:34:f4:4e:cf:04:da:2c:f6:
         7e:4d:1d:f3:80:36:3a:4d:e1:d5:2c:b5:ae:5f:4f:e6:a0:06:
         ad:24:33:b4:25:7a:d4:06:b8:02:b9:56:09:43:5f:bc:18:2a:
         63:e1:27:19:52:b1:02:e4:c7:75:90:27:a9:0f:9f:c5:67:83:
         ad:35:a2:3e:ba:6f:98:ef:c9:d5:03:e3:96:90:13:3b:dc:b3:
         69:c2:5b:cd:a2:a3:f9:23:df:19:62:d8:78:bb:1b:b7:44:7a:
         f0:a1:f8:a8:2a:6d:e0:1d:97:e7:d7:98:c0:54:02:3a:71:ad:
         ca:97:cd:81:3b:fc:41:c4:30:7a:7b:dc:7d:21:56:9e:d5:4c:
         24:66:1d:ff:53:58:0a:ea:02:6a:94:a1:cd:06:a8:16:a7:36:
         16:b3:a2:f5:a5:08:8d:40:1c:e0:4c:97:8c:86:8d:16:22:ee:
         f7:3a:61:d4:4c:f9:82:ac:9b:ad:57:99:58:28:26:2c:7c:29:
         2b:e1:76:ae:1a:69:b1:55:51:88:f5:a0:56:d1:f2:fb:0b:59:
         b9:78:4c:4f:e1:d9:a6:dc:aa:18:0a:a9:24:cd:01:ce:92:51:
         46:bb:14:1c:44:b7:56:cb:6b:6f:71:b5:ed:6d:b3:88:e9:61:
         ef:ef:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:48 2025 by rpki-client