Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
File:                     f6af3399-af56-36fc-a443-43b5b2f73158.roa (raw, json)
Hash identifier:          ymw2N6UrVASNeaDuSQFi5vttoAV15n2GqUTk/mNmK0Q=
Subject key identifier:   2A:D9:DB:3A:AF:97:49:19:EF:69:8A:13:7B:EE:78:C3:31:C8:A7:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C978313C6D4F097CE7180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100c:d240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:97:83:13:c6:d4:f0:97:ce:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=bdaa1e92-f6f1-4ca0-85fb-6688613306ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:3f:12:43:40:46:b1:41:e9:a0:c4:98:d3:
                    9f:59:3d:47:9f:45:53:55:c0:c5:f5:bb:1b:bb:89:
                    66:b7:d5:8a:8f:28:f7:27:2e:16:3b:d7:c7:17:4f:
                    b0:d3:79:14:25:24:a2:fb:15:2f:52:57:b4:08:88:
                    30:f6:5f:79:5f:ad:c0:f9:5f:a7:e0:d4:5a:76:93:
                    3f:b1:ce:6f:f6:31:1d:91:ac:0f:62:d7:ab:b2:aa:
                    8a:30:b5:db:27:44:22:c9:7c:9c:49:78:a6:14:66:
                    a1:ed:4d:7f:48:0f:b0:25:37:76:4a:b9:8e:95:53:
                    a2:39:8c:53:07:e1:9c:0f:96:62:e7:c2:24:c5:c7:
                    00:89:4e:55:43:6c:d4:d4:7d:90:4d:fd:a8:3a:70:
                    2a:fc:9c:90:40:ed:c1:19:e4:2d:20:7b:9e:5e:2e:
                    f4:45:b8:5e:3a:32:24:e5:a3:87:e7:fb:bc:48:df:
                    f1:55:05:04:4c:51:aa:32:0f:c5:fc:7d:a4:bb:b2:
                    84:05:7d:b1:f5:a7:fa:a2:f9:7d:b7:be:78:03:2d:
                    87:a4:89:33:37:18:98:9e:85:24:98:53:57:09:2c:
                    d5:85:39:35:1e:34:ef:f6:79:10:70:14:24:46:42:
                    42:70:67:9d:7a:ed:6d:1a:69:24:37:7f:a3:c0:99:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:DB:3A:AF:97:49:19:EF:69:8A:13:7B:EE:78:C3:31:C8:A7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:83:08:7d:e1:d6:a6:4a:82:29:9b:c9:a2:61:27:a3:1b:
         6a:8b:09:59:0e:a8:f6:cb:91:47:f4:18:90:64:40:9f:e0:de:
         cb:1c:16:ec:25:9b:ee:6c:9b:47:71:9c:b5:11:1e:72:7f:85:
         0a:cd:35:38:4f:a1:a1:20:25:38:ea:ad:bf:91:8f:14:93:73:
         b3:5d:37:11:da:20:84:d3:01:f9:20:46:df:7c:7d:1b:54:11:
         16:8f:60:0f:6d:9e:3c:8a:4b:08:c9:52:bb:f2:b3:42:4d:bc:
         4c:d8:e1:6d:75:d3:7d:8c:df:72:12:1f:14:ef:ea:f0:2d:67:
         16:1f:0f:89:3a:71:01:af:2f:c7:f3:eb:68:55:d9:8d:9b:35:
         4a:c3:14:b1:15:57:7e:ae:ff:9f:2b:43:43:e7:90:06:35:10:
         8e:d0:fa:97:1a:54:13:31:cb:a3:b5:92:21:80:e8:79:51:35:
         18:68:b8:73:76:56:68:19:16:8e:35:2d:fe:28:57:27:49:a6:
         bf:55:1d:44:06:ae:7d:36:cd:91:f1:b0:80:51:cb:c2:76:00:
         e7:2c:12:74:c9:84:75:70:0c:9a:47:dd:16:dc:84:2e:fc:43:
         60:a5:7b:cc:1d:81:d8:b8:a2:99:7f:8e:70:8a:ad:d3:f1:41:
         61:6b:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:21 2025 by rpki-client