Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa
File:                     f0298a8b-0c6d-3dea-9043-45955775ad16.roa (raw, json)
Hash identifier:          el/GkZyb4wUZhKtxzowsBZCaTV2Z+gvQzWne5HgVcLw=
Subject key identifier:   35:11:F0:B1:AC:15:3D:D6:9A:D4:91:04:8B:DF:C5:84:D6:5F:2C:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C37249FAA9AA0A1464BCB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1003:b8c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:24:9f:aa:9a:a0:a1:46:4b:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=757042d6-77a5-4123-a1f6-41871f3cfc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:0b:58:55:7a:ce:4d:e8:de:5b:da:cd:d9:
                    cd:81:a1:bb:84:ac:f7:2e:eb:76:e0:87:d3:ca:4c:
                    4c:f6:54:6e:c6:51:34:08:06:e4:0c:6d:b5:e7:6b:
                    29:e2:2b:60:3a:a5:2a:fc:3b:3d:f0:37:c5:e8:e9:
                    ba:89:e3:b9:ba:32:20:9f:7a:25:6a:65:07:7f:77:
                    45:94:07:30:5c:2f:5a:df:00:23:7e:a5:ba:5a:fc:
                    5e:1d:c8:fd:c1:93:ff:2d:6c:ed:e4:08:d2:5c:60:
                    ab:e6:42:71:5f:b6:5d:91:d9:63:48:25:ac:8f:8b:
                    b7:2d:55:46:bc:a5:40:ba:dc:cc:14:2c:03:5b:95:
                    48:69:44:8f:ca:e5:08:87:22:a3:43:f8:f0:3a:6b:
                    c8:25:67:3a:96:eb:42:63:cf:7e:fb:48:ce:35:78:
                    51:e8:39:2a:8e:a9:bf:20:3a:aa:db:68:23:bf:8e:
                    f0:db:69:8a:bc:22:4b:5f:57:a8:30:b4:8c:cf:49:
                    f4:a9:cc:45:d8:a2:9c:df:af:ea:45:00:db:65:c5:
                    59:f1:88:ef:a8:8b:54:38:66:10:a1:d7:4e:ad:e8:
                    ec:35:4a:13:f5:87:0d:67:5e:4a:9a:f5:33:a0:ff:
                    ec:58:eb:45:f3:14:19:bf:20:d2:10:36:f1:91:89:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:F0:B1:AC:15:3D:D6:9A:D4:91:04:8B:DF:C5:84:D6:5F:2C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b8c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:9e:e6:6c:ab:6a:26:c0:58:d3:5d:54:35:67:70:b3:c3:
         88:f5:2e:fe:91:a3:6a:79:c2:92:b0:c3:a1:a2:c0:52:9f:9d:
         b6:05:79:2a:04:23:2c:21:3b:f8:e7:fa:31:72:29:97:9d:a0:
         a5:ff:1b:c7:a1:a2:38:b9:31:5e:79:63:fb:a6:87:ee:7e:7d:
         1a:fe:24:93:70:00:0e:43:ae:4f:fa:65:75:5c:62:ef:b4:ea:
         6d:c9:f4:48:92:79:d9:b8:a6:9f:77:92:33:34:20:f5:8d:39:
         db:5b:ef:21:ad:ba:23:05:2e:d5:14:5a:00:ee:ed:b3:ac:27:
         db:5d:ba:a3:7c:1b:3f:80:ed:3b:43:f3:2d:5d:15:1a:b3:8c:
         a8:8f:79:30:b5:8f:88:b7:48:02:2f:93:35:5a:f7:e3:01:f6:
         a1:20:06:d8:5d:78:8d:fd:b8:23:44:f6:0f:37:ef:93:93:42:
         8f:25:c1:36:49:f2:cb:2d:83:db:fe:ca:7d:9e:50:f5:b9:8e:
         10:b9:86:e9:20:4e:2a:ef:fa:f4:c3:79:0a:94:1f:13:cb:93:
         79:b0:c2:70:d9:5b:60:9c:68:5c:9d:51:84:52:ff:f4:1e:69:
         d3:96:4a:a0:67:53:d9:19:75:d7:50:68:65:e2:ed:ff:7c:ac:
         a6:ca:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:20 2025 by rpki-client