Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa
File:                     600c4168-7831-3c03-9a7c-637353bc9ab5.roa (raw, json)
Hash identifier:          WeNYT5rZVCZa82USZaSOsmfWrXqFDTcOK3XRYHNDSJc=
Subject key identifier:   39:37:99:EE:A9:5E:96:D1:32:0F:4C:12:FB:5B:78:46:8F:27:3A:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC2709FEACF842450A28EB440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     22394
IP address blocks:        2001:4888:801c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:9f:ea:cf:84:24:50:a2:8e:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=0bae33a0-a35a-4493-b6e9-bb9fff4b2b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:22:e7:95:f6:60:64:27:cb:f9:67:ea:66:
                    de:e4:e3:80:be:35:6d:a0:aa:cc:33:2d:a5:95:46:
                    02:da:ba:cc:1c:b2:00:b1:e3:cd:d3:af:60:40:87:
                    dc:8a:89:f6:92:63:8c:a8:a7:7f:df:93:36:5c:c1:
                    cf:10:f9:1a:bb:ba:16:1d:00:93:d0:c5:e8:04:3a:
                    17:a3:34:a9:69:ee:ec:89:ea:b2:1c:d5:23:eb:d2:
                    7b:84:36:6f:72:6f:87:f7:d9:4c:e5:e3:9f:d7:76:
                    31:10:7f:e0:81:64:8d:70:6f:43:85:d1:e2:72:a0:
                    fb:57:32:a7:fe:87:12:fc:e0:b8:95:ba:fc:51:7b:
                    43:85:66:0e:8c:59:92:30:4b:78:7f:17:24:d0:50:
                    28:86:39:86:21:e4:47:05:2a:81:23:11:bd:5a:dc:
                    e6:33:79:ce:90:ba:b8:7e:3b:91:89:b1:1e:4b:06:
                    50:6e:78:ba:68:83:01:1c:9e:74:98:8e:c1:59:f8:
                    64:f3:3f:48:e0:b3:9a:cf:c0:e6:7d:09:3e:5a:f7:
                    96:11:3e:18:3c:36:53:7b:38:05:9e:79:9a:2f:29:
                    fd:94:05:d0:a4:47:0f:1d:52:f7:51:98:ec:b8:69:
                    aa:7d:07:ae:93:69:5a:cd:62:94:96:73:f3:f2:c3:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:99:EE:A9:5E:96:D1:32:0F:4C:12:FB:5B:78:46:8F:27:3A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:801c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:83:48:da:e1:21:f0:3f:34:6b:79:1d:cb:e3:2a:df:d5:f8:
         61:e3:fe:03:99:72:8d:58:36:cb:41:39:fa:9d:ab:eb:b8:bf:
         cb:0d:51:c1:28:b3:e6:38:f2:85:dd:08:f4:6c:1a:af:5e:a6:
         84:c5:8f:60:7a:ac:e7:99:d4:77:ca:c2:e2:4d:b2:13:e9:77:
         89:84:91:ea:cf:6a:cf:21:b2:9e:2e:4a:7a:38:6f:5c:89:1e:
         20:6c:ce:5e:8b:19:a7:7a:d9:c3:d1:fd:7d:df:c2:06:f1:47:
         16:bb:d0:64:d6:21:23:86:d1:49:fd:51:38:c3:e7:76:c3:92:
         eb:b6:83:2d:1d:f4:9f:a4:19:79:e5:59:95:6e:42:fe:ec:54:
         a3:fe:f4:86:43:b6:07:7d:9c:20:f3:20:99:d0:cd:4f:20:f2:
         3d:13:c8:76:2c:13:3e:d9:0b:df:f2:61:e4:42:15:6e:9d:78:
         c2:30:70:fb:bf:fc:79:7f:70:73:46:79:67:5f:ee:85:86:c3:
         43:91:55:c6:af:fb:ea:f4:c6:c3:5d:2b:ad:1a:48:75:fc:2e:
         a7:67:49:90:a1:b0:74:03:af:ac:6c:e4:69:cd:18:89:f2:f0:
         ff:28:e3:9b:79:15:58:d4:bd:cf:74:3c:e8:e0:a3:76:91:3f:
         ee:cb:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:13 2025 by rpki-client