Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
File:                     f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa (raw, json)
Hash identifier:          ciHSEjwE5sgiTDAh7IofyhP+ZwrHi/IHf8P9Q4iFO+Y=
Subject key identifier:   DD:D0:95:D9:FF:2A:F1:A5:52:32:00:CB:1F:EE:E0:F9:C0:23:C6:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C992596652BE1CF096300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:99:25:96:65:2b:e1:cf:09:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=58305795-9824-4a5d-9422-f12a5285ef9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:18:5c:5d:21:7d:b0:c3:ee:b9:4a:53:f9:
                    a0:b9:7a:d2:2c:47:64:53:9f:4f:3e:bc:2b:3e:66:
                    ca:79:25:8c:f7:dd:1d:70:70:61:32:e9:be:d2:b1:
                    1b:68:47:11:99:92:e0:5c:49:c1:9b:d1:10:ae:30:
                    a9:f8:f4:ff:d3:96:40:13:b5:7a:a4:63:2b:bd:7c:
                    98:79:b8:ee:0b:67:e2:c9:1c:4d:9e:18:6c:dd:d0:
                    90:84:87:7e:6a:c2:ca:56:3e:66:cd:6e:5b:b8:25:
                    85:72:76:9a:f2:fe:be:c7:78:90:ea:ff:59:46:d5:
                    a8:2e:bc:ab:1b:ae:48:6f:e5:f8:1c:e3:93:18:96:
                    5a:46:49:6a:48:e3:fd:db:9f:ad:60:96:78:33:7f:
                    71:36:18:5d:48:e8:38:9c:eb:7e:e3:38:e0:5f:19:
                    68:ed:c4:1f:63:43:4a:d9:1d:2a:56:ca:1c:bf:dc:
                    e3:2a:52:21:6d:13:e0:1c:6b:80:8a:5c:85:c7:f9:
                    2e:4b:03:25:3d:2b:cd:48:b4:05:db:20:4d:b0:92:
                    13:04:40:93:61:36:a6:79:ab:e6:d4:8f:c9:f0:e0:
                    fb:0d:ca:72:cc:0c:75:cb:35:4e:b2:5d:f0:38:5b:
                    b6:67:a6:cd:72:83:b0:a0:fb:02:72:ab:fc:b1:bf:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:95:D9:FF:2A:F1:A5:52:32:00:CB:1F:EE:E0:F9:C0:23:C6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:db:fd:51:d5:e0:db:9e:83:18:e4:d2:b7:db:38:f9:c0:
         47:fc:a2:d4:13:98:58:da:87:a7:03:84:e5:8f:c5:02:3f:90:
         37:81:03:a3:aa:42:d8:2c:dc:67:58:33:ad:95:f9:08:8f:87:
         12:bd:29:a9:98:62:12:e7:47:39:57:a3:a2:fe:10:69:a9:b7:
         91:f3:75:00:53:3f:6e:43:74:98:ab:55:81:37:4d:c1:09:3d:
         0e:11:33:be:39:0a:db:b0:74:5f:6d:3a:f9:21:21:fc:ff:9d:
         32:7e:19:30:e6:4f:67:43:4d:ac:69:25:33:d4:48:90:d0:0f:
         14:44:a7:f8:9d:bd:b9:25:1d:61:f4:ec:3f:5c:5b:92:16:3a:
         f6:62:bf:a3:8f:f8:e1:4e:e5:77:bb:93:c6:2d:3c:fd:36:fa:
         04:0d:5d:99:fb:c4:98:a3:10:1b:86:aa:e3:41:78:ac:26:e0:
         77:ef:c1:f6:d9:d5:d2:95:d4:65:ba:6f:32:9c:c6:9a:d8:bc:
         03:81:e6:4e:9f:29:d8:70:78:d3:06:3c:18:f4:bc:12:9c:7b:
         f2:a6:75:74:02:c9:de:c4:5b:0b:f8:ea:eb:ab:f6:69:18:e8:
         bd:fa:21:65:22:49:75:97:18:70:cd:78:96:e9:d2:0b:92:88:
         f4:68:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:25 2025 by rpki-client