Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1ba7053-7e52-38d7-bf81-9f1be803ef88.roa
File:                     f1ba7053-7e52-38d7-bf81-9f1be803ef88.roa (raw, json)
Hash identifier:          ycK8Sw7VRGqPV/l2Y36MkQkLhEDxAZWIEYGdsCEpsig=
Subject key identifier:   76:65:3E:8C:32:53:0E:51:67:3A:CF:02:4A:7E:C8:D4:95:7C:07:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A11829263399E749F570C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1ba7053-7e52-38d7-bf81-9f1be803ef88.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1012:b0b0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:82:92:63:39:9e:74:9f:57:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=de48c074-90a8-4c9d-b803-56c7cc03c59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:85:73:bd:31:bb:5c:ab:f1:d0:a0:97:15:
                    3c:7e:b1:c3:f3:23:8e:68:3b:11:97:ad:64:7d:ec:
                    11:11:47:e7:67:28:2a:06:12:1e:4b:fb:01:03:f4:
                    ba:74:e4:e6:7c:fc:48:03:88:54:ff:89:af:d5:79:
                    90:3a:0b:56:90:8a:6b:cc:c9:75:21:29:cc:99:4a:
                    6a:c0:41:44:d8:ba:7f:54:dd:30:9a:78:ac:b4:fe:
                    35:23:5e:d0:f7:71:c6:54:d8:ff:ca:6c:b8:4c:65:
                    46:ad:19:d3:41:bb:80:b2:03:2b:12:e8:67:9d:aa:
                    cd:fc:73:fc:47:14:68:e4:22:8b:44:1b:32:71:fe:
                    e3:10:41:00:36:43:8c:dd:86:36:25:da:dd:f2:5d:
                    06:04:4f:dc:65:9c:33:83:ba:75:bc:99:21:90:ad:
                    a8:8a:d6:c6:f7:40:ab:fb:b8:5d:43:a8:e0:90:67:
                    93:4f:f3:50:51:bd:f1:7e:41:8b:9b:ad:32:89:91:
                    ae:0c:28:00:97:7e:84:ce:5f:ae:47:68:f0:32:06:
                    f9:54:7c:58:e8:40:59:bf:a9:6b:90:39:a0:52:50:
                    e1:a5:0f:8d:57:32:ea:45:37:a7:27:d2:80:44:94:
                    19:98:53:57:23:93:a2:b3:2f:dc:fb:2a:fe:3a:94:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:3E:8C:32:53:0E:51:67:3A:CF:02:4A:7E:C8:D4:95:7C:07:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1ba7053-7e52-38d7-bf81-9f1be803ef88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b0b0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:28:f4:32:d6:ac:9f:3b:02:3b:72:44:cb:02:da:da:2b:
         68:1f:41:a9:ce:f0:03:ea:62:d0:c5:c7:f7:21:18:33:a9:5b:
         63:f1:b0:3d:a8:05:1d:31:c1:44:d9:65:b2:40:77:33:33:26:
         8d:54:12:ef:d1:c2:0e:87:3a:92:c1:d3:2a:3c:23:67:dc:9b:
         50:d9:31:04:52:2d:51:0f:00:3c:bf:88:09:57:95:bb:ca:ec:
         ba:22:b0:84:3a:68:cf:ab:b9:9c:69:ba:56:6d:e6:ee:23:70:
         6d:a9:49:2f:f5:09:7d:eb:54:a5:65:01:a2:2c:14:5a:23:e5:
         5e:f0:87:dd:e9:f9:e9:11:57:b5:30:01:72:1e:67:10:6d:28:
         82:b2:a2:a0:50:76:9f:ab:73:6b:2e:4b:12:b4:33:18:45:f7:
         ea:c2:d0:59:78:2a:0f:48:1a:e1:98:4a:b6:85:c2:87:97:e9:
         fc:c3:50:78:65:cd:5b:6f:ae:f8:d1:5a:06:02:18:88:f4:5a:
         02:35:34:b8:a1:de:26:cf:e7:3a:84:87:7b:b2:fd:0e:43:3d:
         96:68:87:f1:97:6c:b4:08:93:cd:3e:41:67:4e:d2:1f:2c:93:
         7a:ec:12:b0:67:16:54:29:12:f0:03:25:09:65:7f:95:ba:08:
         be:2d:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:44 2025 by rpki-client