Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8b78a43-3ed1-3421-be74-b1e1dd9a6bbe.roa
File:                     f8b78a43-3ed1-3421-be74-b1e1dd9a6bbe.roa (raw, json)
Hash identifier:          lxGqXqfg9ENFtaDWCM+UZu2hW17AHxQHjoCqNCTpwcs=
Subject key identifier:   6E:BF:8F:69:9D:C5:00:F9:7D:33:F3:FA:78:75:D9:B7:04:E5:B8:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36E55A33D1714F41396AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8b78a43-3ed1-3421-be74-b1e1dd9a6bbe.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1002:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e5:5a:33:d1:71:4f:41:39:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5867d472-dd10-4589-bd77-cdee39c13956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:3b:10:b4:d9:28:3a:1e:d7:eb:8c:38:50:
                    6c:59:1a:22:b6:72:59:23:f9:63:3d:9a:a9:7e:4e:
                    f2:b7:6d:6d:c4:bc:39:24:0e:d5:64:ce:46:d7:21:
                    ef:33:d8:1d:a4:df:82:f3:c8:d9:cc:2d:7b:d0:5b:
                    a7:7f:76:9f:b1:66:1a:95:00:ef:c1:eb:cc:7d:46:
                    f4:df:d9:49:78:1b:04:54:e7:c4:ad:b1:9c:47:9b:
                    f6:4d:35:3a:24:d6:6b:ea:62:63:48:08:c3:9d:31:
                    12:21:00:d5:db:58:3f:8c:95:38:23:e0:82:0c:91:
                    23:89:6b:64:d2:82:01:e2:8c:0e:c2:21:fe:d5:ac:
                    08:18:15:77:e9:10:0e:84:e3:2b:c1:0a:3d:c6:7a:
                    a9:2b:4c:0b:f6:4a:2c:2e:fb:53:55:9e:00:16:c3:
                    77:4a:e0:0b:83:8d:53:a7:dd:82:41:b3:cc:4f:7a:
                    2f:98:eb:98:82:2c:9f:7c:09:ba:40:09:7a:bd:2c:
                    06:fe:8d:60:36:85:46:7c:02:04:de:18:06:0f:4c:
                    26:8f:f3:02:6e:72:fc:a7:8c:5e:e8:60:57:aa:4e:
                    6d:fd:85:6f:90:e4:6c:2b:03:18:d7:f4:7f:a9:65:
                    92:66:df:1c:e5:e4:05:37:4b:24:19:bb:dc:2d:a5:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:8F:69:9D:C5:00:F9:7D:33:F3:FA:78:75:D9:B7:04:E5:B8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8b78a43-3ed1-3421-be74-b1e1dd9a6bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:59:11:d2:59:0e:20:07:ff:0f:aa:bf:11:e9:3a:c4:19:
         91:09:88:7f:a0:32:90:9f:a1:23:7b:1e:3e:fb:cd:b7:b0:63:
         89:77:43:d2:e3:e4:a0:e0:34:e3:7c:29:97:88:4b:01:31:33:
         d2:5c:18:58:74:7c:8a:15:2b:29:d1:80:e9:73:64:f7:5b:75:
         57:75:62:38:aa:88:1b:19:af:f4:0b:50:07:12:26:6f:ba:da:
         c3:26:45:4c:02:ab:8d:52:d0:74:9e:f7:f4:d2:0d:4e:9f:0f:
         83:cb:8c:df:65:b0:42:38:91:3b:ea:db:1b:c9:be:6f:0f:3c:
         10:0b:a8:7e:10:94:e7:0a:62:e9:e7:97:00:30:7d:cf:56:62:
         ca:f0:99:9b:3a:75:42:c3:b1:66:b0:46:a6:a2:d4:24:af:ee:
         58:de:1e:8f:c8:7a:68:46:ff:df:08:a2:53:87:b5:27:47:c8:
         f8:1e:26:6c:49:4e:70:d7:76:50:90:34:55:a1:9b:01:11:d9:
         bf:9b:38:69:73:d0:a7:5d:96:d8:4f:0e:4b:ae:5c:e6:a2:7c:
         61:08:a3:25:a0:23:28:4b:2a:e3:ee:96:d4:ac:ed:99:49:52:
         b9:aa:a1:13:85:05:74:45:3e:ed:a7:40:97:c0:e2:33:86:d3:
         8e:e2:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:45 2025 by rpki-client