Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa
File:                     89d495fd-c6b7-3f8c-8100-290c9bcef233.roa (raw, json)
Hash identifier:          59DjWooiM+x6dKHCbuYkqyDQBBbtfHV0sbf8qxEY8CM=
Subject key identifier:   DC:24:82:CD:B2:E1:AF:9D:31:FB:BF:FA:9E:D7:5D:E7:2A:13:17:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15EC15BBD7C44CB3693C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1009:a128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ec:15:bb:d7:c4:4c:b3:69:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=2d86c49d-7744-4e29-93d8-78efaf72f104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:77:25:e7:f3:6a:cd:e3:0d:b4:ae:48:ab:
                    e0:56:61:60:3a:77:24:7e:bb:8c:b8:0a:e5:0a:ab:
                    7e:3e:f8:c7:1a:be:5e:9f:40:a4:6a:e4:9d:13:d4:
                    8f:e8:39:b8:02:15:a4:a2:2c:c9:6c:c7:68:e6:f3:
                    e1:ce:34:be:cf:f3:73:b8:53:d5:cc:42:3f:52:e3:
                    c8:86:21:df:c1:62:c3:4b:ae:5b:93:ef:03:bd:4c:
                    02:ca:d2:f4:0c:15:3c:5c:bb:2b:85:e7:ef:de:f2:
                    ea:98:7e:e9:ed:ad:37:a4:1c:8e:91:b7:b3:bd:a7:
                    fa:50:e9:93:a4:f9:15:93:13:29:f8:70:eb:98:83:
                    be:01:c2:9c:30:23:4e:d7:f4:1f:b9:c6:64:4d:fa:
                    b8:5c:52:e7:4e:a0:88:69:c0:5a:95:63:52:6d:3c:
                    c6:07:8e:5c:00:5d:9c:70:85:25:44:4d:fb:3f:97:
                    d7:73:e7:5e:52:71:2d:bc:6b:19:a8:b3:e3:63:78:
                    02:e3:54:9b:9f:ad:d5:05:d6:63:d5:60:21:c7:b9:
                    98:ef:02:c7:b4:3c:e1:72:5c:26:d5:ba:7e:42:e5:
                    81:07:75:d2:59:31:6e:5d:ee:5d:33:94:d2:c9:1c:
                    6a:5b:bc:b2:89:2c:a5:d5:e3:8e:53:27:11:ba:44:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:82:CD:B2:E1:AF:9D:31:FB:BF:FA:9E:D7:5D:E7:2A:13:17:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a128::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:0b:79:e8:48:2f:27:07:81:4c:3a:a2:23:f7:d1:34:8d:
         21:f9:df:8b:93:71:df:57:08:5d:ba:34:87:fa:68:17:15:6b:
         8c:91:f1:a5:9f:3d:2b:ac:0e:6d:72:84:ac:f8:a5:e2:bb:2c:
         8a:5c:31:85:c8:97:09:a9:31:0f:7e:fe:37:4b:79:30:66:a0:
         8f:c2:d6:cf:21:f9:9d:c6:2d:b6:16:a8:14:ab:34:61:fe:ba:
         81:1f:b1:f5:70:74:c7:4e:a4:43:27:ae:32:01:aa:c8:56:c9:
         26:b3:8a:97:a0:76:16:6a:1f:20:f7:a3:82:19:11:c0:a4:93:
         97:93:a8:2f:ed:a3:b2:9d:3c:dc:e7:06:31:0e:a9:2e:54:bc:
         ac:5f:b8:a4:2e:b8:8e:0f:54:1b:8f:f5:4c:1b:c6:cf:21:88:
         e2:73:a8:a7:cc:65:34:0e:6f:41:e0:b5:2f:68:86:5d:c6:68:
         be:72:c0:8f:54:4e:c3:3a:06:e2:28:e6:d9:cf:d1:7e:e0:77:
         ec:d6:cd:84:cc:26:57:95:78:0b:52:71:03:16:7d:9f:09:0c:
         66:25:31:95:d2:c9:91:f2:b6:9c:eb:48:99:4c:33:d6:28:58:
         89:1f:30:b3:8e:72:f0:47:2f:49:5e:20:b4:65:bd:0a:e4:4e:
         6d:93:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:07 2025 by rpki-client