Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff35248e-841f-3dd7-943b-a1fd12d54fb6.roa
File:                     ff35248e-841f-3dd7-943b-a1fd12d54fb6.roa (raw, json)
Hash identifier:          qOkljnL1byKB48OtXl/EBl508OCNa5hfM+Rc9P5QOGQ=
Subject key identifier:   A8:0A:F6:06:5D:8E:AD:7E:82:05:6A:A5:47:EF:ED:FE:55:00:58:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F17CFDAF88C2EDFE02C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff35248e-841f-3dd7-943b-a1fd12d54fb6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f1:7c:fd:af:88:c2:ed:fe:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=88452d8a-48fc-4f68-909a-c247b8d48aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:f9:64:41:8a:9f:bd:1b:94:d1:a3:a8:a4:
                    bf:1b:72:b4:85:c8:7b:2b:34:07:85:30:39:8b:f2:
                    b0:0b:c6:16:1c:be:ad:8e:c6:c1:c5:5d:7f:40:c7:
                    ef:7e:bf:6f:47:bd:e0:5b:8d:3f:40:3c:d0:29:8a:
                    96:6d:06:7e:26:84:ed:03:4c:e1:0f:df:17:86:3c:
                    b2:94:72:bd:72:ae:3d:3f:ef:49:30:c2:e5:6e:8e:
                    d8:9a:25:5f:82:37:6c:5d:31:1c:17:fd:a0:29:0f:
                    c6:c0:aa:4b:1e:36:ad:c8:1b:19:0a:3a:7f:46:ca:
                    82:0e:8f:db:ad:e6:c9:a8:6d:72:4a:4d:23:28:f4:
                    6d:05:4e:f0:23:7f:4a:df:cf:32:aa:05:b7:ee:75:
                    84:86:c6:29:7f:0a:98:22:96:52:d7:4f:81:91:8d:
                    d8:53:d7:49:f2:37:f0:23:39:96:56:eb:31:66:73:
                    ed:03:0b:cf:10:27:bb:ca:2a:26:2e:8f:87:14:5c:
                    d5:9b:b7:3d:79:58:4d:b4:91:ef:5d:f5:27:71:1a:
                    b3:f9:ae:b4:d9:24:6f:af:8a:01:56:c2:a9:06:f7:
                    4c:70:cd:1b:f9:11:1a:de:57:94:76:5f:10:bc:b2:
                    d3:8d:98:59:12:c2:ca:9f:c7:54:2c:3b:8d:78:30:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0A:F6:06:5D:8E:AD:7E:82:05:6A:A5:47:EF:ED:FE:55:00:58:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff35248e-841f-3dd7-943b-a1fd12d54fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:0b:af:8d:fc:02:1d:8a:ab:5c:8d:11:af:be:35:94:b7:
         1a:40:98:72:73:39:9c:67:0e:5a:d5:4e:bc:7d:a1:e6:aa:fb:
         88:9f:fd:b1:1f:e9:b1:75:4a:58:17:7d:48:00:77:c7:a7:ee:
         9d:fe:b7:83:00:33:d7:1b:c2:2a:7a:45:5b:49:7d:69:1e:7e:
         2a:48:48:03:f2:45:84:e8:2d:52:9a:b6:ec:66:30:7f:ea:9f:
         bb:d6:d5:2c:57:fb:c9:e0:2d:8c:13:49:4b:c0:96:be:e3:54:
         2e:13:75:0e:2f:fa:95:45:dc:b8:e1:42:a7:5f:97:cf:3d:91:
         ad:4f:b3:54:ca:ea:03:36:bd:c1:12:8c:6f:25:4a:4c:55:0f:
         29:55:fb:13:50:b6:60:65:15:23:50:10:e4:3f:77:a3:a6:e6:
         35:7c:1d:81:df:1c:2f:08:a6:38:bb:55:6e:57:b5:de:80:5f:
         dc:25:cc:0b:5b:d6:6d:7b:fe:cb:c2:0e:2e:c4:60:93:31:bf:
         32:c0:b6:6d:d3:c9:70:6b:bc:f6:54:59:f4:e8:a7:51:0c:c0:
         6a:e5:24:41:ca:41:96:0e:61:a8:40:98:fa:ae:2d:67:6f:d4:
         b9:db:3e:fd:a7:cd:c2:b0:3e:67:37:2d:1f:9e:39:4b:77:9b:
         c5:6d:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:38 2025 by rpki-client