Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
File:                     b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa (raw, json)
Hash identifier:          n7CVSOfmngCVi/Lg4/9yIEhYySnHQP5GHLZJL1zgTMI=
Subject key identifier:   F6:FE:DE:E1:42:D0:EB:79:A0:06:A3:18:FF:97:8E:68:DB:B3:8A:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A82AB4E32931A995B95038080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:100c:b298::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4e:32:93:1a:99:5b:95:03:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=2f39e173-979a-4b20-be86-97d2c35f83d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:ff:23:90:30:ae:5b:20:44:12:bf:dd:37:
                    90:72:70:56:d7:99:e5:3f:d7:75:92:e1:ad:84:0a:
                    ac:44:49:23:c5:d8:41:c2:85:5a:3a:c2:91:98:11:
                    87:d8:f6:53:a5:3b:c9:d7:3a:a8:42:2d:de:9b:d4:
                    3e:25:3b:a1:9a:cd:22:08:fe:6b:94:0e:b1:15:70:
                    a6:69:c1:a9:45:c4:d4:32:46:91:0b:02:f6:f7:04:
                    c4:3c:34:20:5b:43:3f:65:50:d3:11:8d:d0:98:bb:
                    89:93:77:16:a1:0f:1c:18:cb:fe:d8:77:b4:b2:59:
                    f0:64:8d:eb:1b:f0:2b:a2:5e:58:20:5c:4f:8d:d7:
                    be:37:ca:f7:ca:60:d2:31:a8:96:6e:17:ad:de:fc:
                    e3:1a:cc:d8:44:ea:a3:ad:7f:d4:77:8a:d9:78:61:
                    c4:7b:85:b3:37:b8:2e:fd:d0:cd:05:7e:94:e7:43:
                    b4:29:a8:08:ca:82:25:9b:1c:2c:3e:4a:d3:6a:15:
                    5f:00:89:05:ec:4c:47:d9:87:98:ed:d8:bf:16:3b:
                    71:65:50:e3:d4:d7:69:62:77:bf:fd:b1:17:6b:e4:
                    80:d8:b3:0f:46:21:89:6f:71:2a:f6:96:48:dd:9c:
                    3d:04:f9:fd:06:3d:fd:76:f0:5d:f3:79:be:5a:ba:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FE:DE:E1:42:D0:EB:79:A0:06:A3:18:FF:97:8E:68:DB:B3:8A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b298::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:31:c1:6c:6b:14:69:72:22:1c:c8:41:da:68:b2:a2:27:
         66:66:89:ac:38:d8:a8:a2:27:9a:fa:21:c7:ae:75:9d:e6:e1:
         66:6a:a1:0b:e0:98:d3:3e:fb:1b:73:8c:1b:cf:bd:5e:20:9a:
         59:8b:25:f8:d9:1e:7b:c3:68:17:b4:98:23:b4:4a:29:c7:55:
         0e:49:29:f6:c4:f3:db:36:8d:30:d2:b1:34:b4:4e:98:c6:44:
         ec:93:f2:a2:d6:46:58:b2:28:5b:71:69:ef:1a:43:8b:23:8b:
         d4:6f:96:5d:cf:0c:01:6d:92:48:ed:c8:f6:6b:13:20:2f:d5:
         d9:c6:8d:ef:33:f1:98:be:09:71:5b:9f:3f:05:b6:75:e9:bc:
         8d:5b:8e:8b:9a:f0:1e:91:80:3a:ff:19:8b:86:6c:aa:80:d0:
         34:4f:06:b8:69:4f:83:bb:99:5c:43:be:a6:b8:20:2c:ab:b2:
         d8:8a:03:df:55:0f:1b:af:f2:be:20:a3:fd:b3:4b:88:7d:45:
         2e:b0:c0:98:14:7a:a3:20:40:d7:29:f6:9b:33:89:e2:e6:99:
         aa:71:4a:c9:72:28:e7:99:2b:a0:dd:c7:f0:b7:da:b2:0d:78:
         10:e8:76:bc:7c:8f:47:9e:5b:bf:b9:0d:f8:36:88:89:89:f0:
         3a:c6:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:15 2025 by rpki-client