Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f44ec4bb-18f0-3be2-8793-599040eb3adb.roa
File:                     f44ec4bb-18f0-3be2-8793-599040eb3adb.roa (raw, json)
Hash identifier:          JRsQGEUPOUH3SWGmxO/9aKns+DDLm2quz/vP5CvVoTM=
Subject key identifier:   C8:85:62:79:74:5F:20:4D:AD:E0:5F:A3:67:99:A7:BA:56:BB:22:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EB3DC8169B4F32E63F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f44ec4bb-18f0-3be2-8793-599040eb3adb.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:eb:3d:c8:16:9b:4f:32:e6:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=30f7d244-fdb7-497b-b3c7-58c47684126d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:68:75:6f:61:12:00:e6:99:f1:c1:2c:a8:
                    43:25:f2:c1:47:d0:04:04:31:ac:d2:76:68:0a:0c:
                    42:55:8e:a6:b0:94:98:ad:b1:5c:42:5b:5d:a9:30:
                    66:d1:61:21:60:f9:4e:ee:38:ac:c6:99:99:8f:87:
                    7c:c4:af:2a:bc:b6:51:be:69:83:ea:ac:50:8e:78:
                    b6:32:c1:9a:1f:09:d1:b4:88:87:7e:25:fc:40:4a:
                    39:69:14:42:ff:c4:5f:90:5d:f9:b5:0a:e8:07:44:
                    47:7c:39:7c:b9:12:65:95:6f:96:63:2e:b1:08:cd:
                    63:be:ce:37:53:fc:22:91:cd:27:7b:8c:be:0b:ab:
                    8b:40:fb:18:a3:54:af:32:b6:12:d8:aa:f8:da:f2:
                    84:a9:b1:56:e4:92:29:88:eb:99:18:b3:ad:ff:ba:
                    5c:f4:92:03:b3:a1:76:e1:e7:82:df:68:20:8f:85:
                    38:b3:6a:ea:09:63:e9:9a:d6:6c:3c:29:65:3e:1a:
                    5a:45:78:29:b1:e9:ed:da:09:45:1f:c8:2b:85:1b:
                    4c:d0:ac:c0:6c:07:ed:79:6f:e7:47:b2:45:74:93:
                    6a:66:c7:39:e1:5a:6b:d1:ba:6a:c6:b2:26:30:88:
                    71:f1:62:0f:c2:90:94:2f:1c:22:81:2c:7e:9b:97:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:62:79:74:5F:20:4D:AD:E0:5F:A3:67:99:A7:BA:56:BB:22:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f44ec4bb-18f0-3be2-8793-599040eb3adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a1:3a:0d:7d:59:c2:b8:34:2e:f6:75:ec:36:f9:74:69:44:
         a5:4c:78:8a:f1:75:24:df:5c:f4:40:17:d2:d9:1b:27:57:c8:
         3c:eb:b3:0c:ce:5a:f1:19:89:96:9e:c9:fc:fb:a6:b3:8a:92:
         b1:ec:08:31:7c:e1:c2:64:37:f8:1f:46:7e:1a:a3:f2:79:3c:
         bc:54:7d:7d:dc:4d:2c:1c:40:36:78:eb:f1:6e:e5:da:47:38:
         86:84:13:39:71:cf:22:80:13:8a:c6:10:79:7c:ad:6b:42:37:
         77:f3:28:c4:73:a8:76:81:e3:2b:66:90:27:95:6f:cb:b9:b0:
         03:28:1c:ca:80:b8:21:d0:59:44:3b:a9:f6:9c:3a:e5:d3:e7:
         60:ff:22:a9:cf:ab:40:17:95:5c:4b:47:87:d9:55:4f:3b:48:
         e8:89:10:02:2d:ff:f6:02:6a:1c:89:2f:2b:8f:9e:22:bb:7c:
         75:e0:2e:73:a1:96:6d:de:27:8c:17:e7:66:70:a8:33:bf:9b:
         d4:f1:ea:a7:c6:6d:d9:d3:3e:93:0a:a0:8d:54:6a:83:98:d9:
         4c:47:21:ef:73:36:72:a6:03:60:f6:57:44:85:b9:d1:82:c3:
         72:cd:05:2b:24:3c:d9:ad:d0:7d:33:16:af:ae:b0:ac:02:6c:
         90:3e:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:23 2025 by rpki-client