Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3c64c5f-a218-3cb1-ba94-cbe1c7813369.roa
File:                     d3c64c5f-a218-3cb1-ba94-cbe1c7813369.roa (raw, json)
Hash identifier:          AAE6tz4t1C0XwgO6AEIdAK2Ltntf73YuO5iIMxf/8XY=
Subject key identifier:   98:92:5A:F7:9C:1C:38:E5:7A:4F:D9:A7:A3:C7:7C:8A:AC:6E:79:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB5C26D082A09B1FB79067600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3c64c5f-a218-3cb1-ba94-cbe1c7813369.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        2600:100c:d2e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:6d:08:2a:09:b1:fb:79:06:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=f438e58f-28b1-40ff-baf3-1519d49a4d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:2e:d6:47:83:00:db:26:07:ca:be:ae:45:
                    4f:cb:02:8f:f8:89:9f:af:2d:74:12:18:e3:fb:d8:
                    b6:32:cc:92:38:49:3e:73:90:da:f1:ec:00:ca:b1:
                    d1:bc:09:b4:19:00:3c:ac:f5:dd:93:ba:2f:95:29:
                    24:fa:ad:97:a8:b7:e0:f4:fa:07:65:0e:c4:eb:b8:
                    cc:e3:f6:f5:cb:90:1d:51:b7:d0:a9:9b:6d:2a:a9:
                    2e:1f:34:ce:c0:bb:7d:58:8e:1b:9e:72:ca:83:5f:
                    5f:8a:41:f7:16:78:1a:0e:ef:d5:aa:6e:bd:44:3c:
                    11:6f:72:fd:10:c5:b9:be:b1:73:9c:e5:6c:dc:c2:
                    4a:30:e8:e0:35:95:f2:ec:e9:2e:f2:e9:9f:dc:08:
                    65:47:82:43:f7:de:e4:cf:9e:a1:db:e9:26:8d:5a:
                    75:cc:ec:a8:68:33:9e:3c:c9:c0:10:d3:c6:14:ed:
                    f2:d0:2d:52:88:95:a9:c1:7a:db:b8:e9:45:c5:c5:
                    7c:9e:73:2b:e3:8a:d3:da:8c:5b:66:78:32:59:59:
                    dd:7e:37:c7:18:6a:17:81:5f:e8:55:f9:51:7e:be:
                    13:a2:36:44:65:a1:cb:d2:8e:2d:e7:9d:ae:54:e6:
                    14:f8:b6:20:6c:92:e9:d7:76:45:e1:d1:02:a1:86:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:5A:F7:9C:1C:38:E5:7A:4F:D9:A7:A3:C7:7C:8A:AC:6E:79:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3c64c5f-a218-3cb1-ba94-cbe1c7813369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d2e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:26:8b:f7:00:0e:f5:d6:8e:d1:74:4b:23:2a:7a:20:b1:fa:
         18:7e:4c:f5:52:5f:fb:6e:52:57:55:17:12:01:7f:02:89:b5:
         5e:d4:9e:b7:a9:00:dc:b7:ed:58:5b:c2:35:5c:55:24:24:59:
         6f:6f:8c:97:71:dc:7e:01:58:a3:8d:e1:cd:d4:4d:d4:9c:c9:
         82:09:af:b3:93:c9:bb:ac:d1:52:04:03:f0:54:23:80:d3:16:
         08:88:0d:87:68:16:c3:5c:28:70:ac:60:63:5a:17:59:d5:10:
         70:4f:5f:cc:9b:89:0f:09:c0:83:b4:81:ab:35:75:28:39:cb:
         e6:03:3e:30:91:ce:db:4c:41:f7:7d:8f:41:e1:67:5a:8c:59:
         bd:31:65:87:fa:73:39:6e:fd:62:16:6c:99:75:94:98:cb:bf:
         e0:6f:29:cc:53:fe:cc:17:ad:8f:c8:67:8f:b4:5a:2b:ef:8d:
         54:59:6f:a1:0b:dc:30:21:2c:fd:95:d9:15:6b:a2:b0:c4:50:
         15:03:88:1d:63:b2:cf:f1:4d:42:06:ac:66:0c:1f:e9:18:24:
         a2:37:6f:7a:46:12:80:f5:46:59:bf:0a:e1:83:4d:6c:ff:57:
         67:ff:a0:85:f8:79:15:e1:fd:8d:6c:49:b9:0b:57:8f:d8:e4:
         09:44:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:08:58 2025 by rpki-client