Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa
File:                     ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa (raw, json)
Hash identifier:          aDwrPSZkH8qCMgBwLQ9cOhbObhdQzcxhFuHpnIdMnv4=
Subject key identifier:   66:B7:CC:7A:8B:8E:C3:2B:C2:B8:D9:43:3D:69:B3:7E:86:FE:47:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371C2037AD9F7447174400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1c:20:37:ad:9f:74:47:17:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=1e7accc7-4ce9-49ad-99cc-743369df9218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:47:06:fc:80:60:be:5f:c6:92:77:99:81:
                    3c:8a:57:ed:31:37:c8:c3:d5:dc:df:87:77:a5:99:
                    a9:80:f2:de:d5:41:bd:8c:2f:45:80:3e:35:c9:fc:
                    8c:90:b6:ee:67:af:68:8a:c3:37:61:34:df:bf:c7:
                    0e:71:7f:8a:18:36:19:a1:93:3d:eb:fe:99:6e:1e:
                    89:99:48:73:65:ab:2f:15:c2:8b:aa:ee:52:3a:11:
                    3f:6a:88:02:5d:42:4e:08:78:ea:b6:98:70:e2:1a:
                    ba:ae:44:be:89:d6:72:4e:74:ba:56:5d:6e:40:69:
                    68:e5:f1:f6:19:fa:99:aa:9c:bc:83:42:48:b2:25:
                    57:7e:12:01:e1:3b:c5:41:4a:1d:31:8d:63:e0:23:
                    e8:20:09:87:e7:9b:f4:cf:1a:95:6b:d9:a3:a0:85:
                    2b:96:64:8a:22:6c:01:89:40:da:63:1f:26:75:d7:
                    be:cc:32:76:a5:05:18:ab:95:90:17:f1:42:14:f3:
                    35:b4:bd:18:f9:4d:55:0a:6e:32:a0:6e:12:7b:4b:
                    14:21:74:ff:14:9c:ad:b0:4e:23:d9:8e:4e:fa:b1:
                    8d:ef:4e:28:8d:6c:5d:90:59:ac:e8:23:90:2b:ce:
                    99:15:02:a7:ec:09:79:82:d7:fe:c4:0e:df:05:fa:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:CC:7A:8B:8E:C3:2B:C2:B8:D9:43:3D:69:B3:7E:86:FE:47:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:1d:e6:dd:51:f2:81:ef:e3:60:0f:f7:dc:47:f8:fb:26:
         e9:92:15:b2:c0:d7:a5:7e:c0:33:ab:28:2f:3a:3f:62:7c:22:
         2a:03:13:01:fd:44:92:3f:b4:b4:c5:e6:a3:8f:8b:b3:19:1f:
         fd:ea:24:ca:83:d0:7f:49:76:8f:27:22:f4:be:b1:c6:85:d0:
         e0:1c:4d:12:6c:60:9c:59:68:93:45:7c:42:3a:4d:87:bc:d6:
         32:a1:36:96:8d:6a:57:32:b4:61:da:97:f5:f1:b7:df:a6:e5:
         b5:4a:9c:a5:5d:a6:23:8b:db:9d:57:8c:a1:ca:f5:a4:98:0f:
         45:38:e3:8b:a4:5f:b9:ba:89:02:18:e4:24:33:ca:b4:76:7d:
         2c:ef:a5:4c:8e:5b:3f:3a:2b:fb:2b:68:35:20:66:06:48:29:
         7e:51:ae:b1:ed:7b:2e:d0:bd:fe:7a:c0:bd:68:77:7e:0e:3d:
         ff:69:25:0b:3a:b0:8c:13:ff:5d:09:a1:d8:c2:a3:e8:85:cd:
         f0:71:a1:ba:63:69:ca:6a:2d:75:bd:3d:23:88:c1:9b:8c:36:
         c0:2d:40:a6:84:e6:d8:14:0d:24:dd:95:5c:f7:55:c8:de:a1:
         83:d8:6d:fe:44:83:02:ed:f9:b6:11:ac:9d:ff:21:0d:de:41:
         43:fa:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:39 2025 by rpki-client