Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0627079-a475-32aa-aa11-1e1d7f6577da.roa
File:                     f0627079-a475-32aa-aa11-1e1d7f6577da.roa (raw, json)
Hash identifier:          XWdUlgY4v/lxnPZuc6qpn9I5Ye4732lRu+LIoof4Pl4=
Subject key identifier:   EE:6C:2A:E5:AE:32:D1:A7:44:16:96:33:BB:80:1D:AA:C9:79:AF:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F140D11FAAF8F8AEFB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0627079-a475-32aa-aa11-1e1d7f6577da.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f1:40:d1:1f:aa:f8:f8:ae:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=39901200-2b03-4a49-b95e-a0e2ea1e5831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:55:36:f1:73:5c:48:c2:73:17:2c:9e:2f:
                    1f:3e:00:5e:67:a9:24:e9:48:17:c7:d8:98:31:20:
                    f3:69:f0:69:99:a8:a4:29:8e:f6:8a:53:68:a6:60:
                    2f:cb:e7:1b:09:ee:d1:ca:39:bf:c5:99:5d:fe:18:
                    0b:ad:d1:35:1c:ed:52:48:82:9d:2f:8d:bb:41:9c:
                    24:88:2c:a0:c2:36:07:09:98:26:9b:05:28:dc:1e:
                    3d:04:89:a7:0e:db:35:86:4f:df:4b:61:99:37:3f:
                    bf:10:cf:55:cc:0f:f6:aa:d8:11:27:8f:e2:d6:82:
                    1d:a8:b0:3b:73:1a:2e:6c:96:75:df:3c:43:e8:5b:
                    d2:2d:18:b2:ee:6e:c0:fa:a2:d6:dc:aa:58:d8:86:
                    ec:ad:06:ca:76:f4:93:79:cf:d1:b7:96:cd:49:e0:
                    72:2e:4e:19:fe:82:ad:8d:7f:83:aa:63:53:16:31:
                    2f:b5:64:d5:ee:36:c7:c5:7a:66:f8:40:73:f4:54:
                    03:fd:a7:6a:49:2c:e0:78:82:c8:3a:62:4f:cc:d0:
                    1e:4b:34:d2:fd:87:b0:10:2b:da:be:31:7c:66:49:
                    d9:5a:77:a5:6a:05:dc:9a:ec:87:49:87:85:a0:44:
                    77:d6:90:fa:13:9e:f1:b9:65:55:2d:8c:59:20:d3:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:2A:E5:AE:32:D1:A7:44:16:96:33:BB:80:1D:AA:C9:79:AF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0627079-a475-32aa-aa11-1e1d7f6577da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:89:a1:d8:c9:fd:16:fc:75:c7:3d:22:de:a6:07:ad:02:3a:
         39:18:a2:74:1a:42:a0:a0:ad:46:a9:d3:eb:fb:01:60:3b:08:
         fa:54:23:4e:87:6d:1f:8a:8f:73:48:71:2e:6d:32:59:57:17:
         ec:84:9b:fb:66:ad:d4:36:11:27:c7:a6:bc:d9:36:a6:ef:d3:
         0e:73:d8:3a:11:96:1e:29:b3:ee:d1:77:bf:66:84:9c:f8:d7:
         d4:c2:f8:a4:fb:9e:5e:66:c7:3c:34:f6:3a:35:18:b7:a2:92:
         96:17:e2:0a:87:10:fc:56:5e:2e:fc:be:75:87:e0:07:f0:6d:
         d8:81:ca:38:e8:18:7b:61:2b:29:34:8d:15:fb:35:ad:89:5d:
         45:58:2f:f5:fe:97:a1:53:f9:32:f2:1a:1b:13:f7:13:bc:c0:
         76:b0:15:a2:d2:c6:62:79:22:58:0b:de:be:b6:23:ce:0e:c4:
         0a:a8:44:26:1e:6c:4e:dd:fe:51:0a:52:e9:98:aa:53:5a:f1:
         3e:14:8a:87:3c:8c:96:7e:33:e0:64:b0:34:98:d4:42:23:5b:
         99:93:1c:56:ff:da:8a:bd:16:6b:6c:cc:51:95:fc:92:4d:84:
         61:73:ec:41:67:be:71:cd:6c:2a:a0:e1:9f:53:54:f8:15:1f:
         fd:64:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:38 2025 by rpki-client