Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6814b45-4c61-3bfe-a845-27a77f2a3172.roa
File:                     f6814b45-4c61-3bfe-a845-27a77f2a3172.roa (raw, json)
Hash identifier:          3pYnrW4Ff1K8wKxQtcwL+eEiRK7xs6TQTw2LdzSGD4w=
Subject key identifier:   F3:02:06:27:DB:16:59:98:E7:9B:C6:4F:43:B5:FD:53:87:A7:7A:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8FF3C5D06EF27E168D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6814b45-4c61-3bfe-a845-27a77f2a3172.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:8f:f3:c5:d0:6e:f2:7e:16:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=745d1cb9-9874-45ab-843b-76d3652ddacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:35:c1:fb:17:0f:74:fe:fc:2c:06:13:e0:
                    67:75:91:2d:c7:22:a3:ac:df:8b:11:87:8f:6d:4a:
                    05:34:b0:47:5e:cf:fb:d8:77:f7:56:40:4a:99:d1:
                    3f:89:82:7a:81:1d:52:cc:7f:e0:23:46:b2:4a:e1:
                    86:a0:82:c4:80:9f:ba:b1:0f:58:bf:ec:99:46:b1:
                    49:f9:76:2b:95:27:48:5e:78:cf:88:16:3e:f2:82:
                    cb:cf:6a:28:5e:e6:81:0f:f4:d1:1e:c2:91:5b:d5:
                    b1:d4:82:dd:bd:99:5b:fb:43:84:a4:8b:e1:5c:df:
                    90:ec:70:c4:68:cf:62:65:c0:1c:a5:ee:58:38:41:
                    5d:4f:a9:bd:0b:75:46:8c:04:ec:20:75:b6:15:ea:
                    81:03:21:bf:f3:e0:3b:a9:f4:1d:c9:6b:07:e1:8b:
                    f9:02:06:0d:14:78:8b:11:20:db:50:69:98:74:59:
                    77:91:27:28:7e:0a:a5:98:8f:73:54:cd:55:ec:a4:
                    94:35:24:9d:69:c9:10:f6:a9:99:c7:8a:54:0c:77:
                    07:ea:48:8b:23:e2:bf:a3:da:dd:37:b1:87:8c:a8:
                    18:f0:a6:27:03:b2:cc:ac:83:b8:b7:6e:03:d3:2f:
                    69:7a:e5:e7:a0:27:d6:6b:2b:4e:9e:3d:f2:47:44:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:06:27:DB:16:59:98:E7:9B:C6:4F:43:B5:FD:53:87:A7:7A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6814b45-4c61-3bfe-a845-27a77f2a3172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:ac:2a:de:76:f7:40:e6:e9:9b:e0:4b:c3:5c:2e:32:e8:
         19:0c:3b:fe:df:ec:f9:04:c3:ed:51:6c:3e:bf:83:cb:4d:c8:
         48:24:98:88:41:19:ac:3f:e6:8f:26:a6:9d:c2:d2:c4:9d:3b:
         ee:43:2d:b0:4b:5d:5b:53:2b:f5:5e:5d:9b:af:c6:6f:91:de:
         d4:12:65:4d:ee:c3:d9:99:5d:15:53:5a:36:db:75:71:f8:18:
         e3:ff:a5:97:80:1a:f0:eb:47:44:66:52:09:a7:84:71:bf:19:
         c2:6b:4e:67:2d:1e:63:64:d6:8e:f6:bf:d0:43:39:50:e9:c9:
         11:b4:ea:a8:a1:fb:8a:5b:14:7b:aa:22:bb:3d:c3:68:5a:81:
         66:f4:b4:76:7f:fa:59:65:9f:ce:96:76:df:8d:4d:15:55:6a:
         35:71:c8:31:de:02:73:36:16:2c:46:8f:f5:72:45:d1:87:2a:
         0a:84:a4:c0:ae:cb:f1:f6:ea:63:8f:41:2d:9d:89:32:f8:a0:
         12:5f:f6:6d:64:5e:b3:ad:e9:35:67:f1:45:14:f1:37:97:d1:
         22:e7:d8:fe:80:d1:56:2c:30:df:06:97:39:1b:6d:d3:60:4a:
         b9:72:91:46:b4:44:b2:73:6c:1e:c6:7b:80:60:9e:6b:4b:1f:
         64:b8:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:43 2025 by rpki-client