Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d55c3a6d-4486-3f7f-ba08-446907978d5f.roa
File:                     d55c3a6d-4486-3f7f-ba08-446907978d5f.roa (raw, json)
Hash identifier:          EM6r1NfMRaUa7VQ+3R1G748q314D5qKaSpg1CkD+71o=
Subject key identifier:   75:78:88:4D:32:85:FD:BC:2E:24:ED:33:BB:F6:FB:71:D7:B8:4F:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD3A393D9E55BB47410560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d55c3a6d-4486-3f7f-ba08-446907978d5f.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        2600:100b:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:3a:39:3d:9e:55:bb:47:41:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=f58484e3-dbdb-44fd-8c6b-b56437435ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:fb:b8:4f:30:69:5b:9e:b6:80:2c:ec:84:
                    f5:44:2e:14:8f:5b:68:7f:af:ee:55:5e:b1:e6:34:
                    b4:83:37:8d:cc:15:39:c6:e3:a6:4b:64:d5:0e:88:
                    5a:f1:82:8c:78:ac:2d:00:6f:00:53:da:9b:f6:80:
                    ef:c9:60:62:c1:5c:da:7e:04:3c:dd:79:c5:64:71:
                    78:0e:bf:e3:d3:c3:13:32:05:cb:fa:b2:e0:05:67:
                    a0:d8:5b:6c:6e:54:ba:5a:f9:2c:67:af:8e:ed:b3:
                    9b:70:ba:e7:65:c7:72:db:b8:4d:15:2c:30:a0:d8:
                    6b:bc:9e:4e:3e:98:aa:bd:6b:9b:ac:e4:03:ae:93:
                    cd:84:70:21:c6:56:4e:8b:e2:21:d4:34:08:bb:40:
                    b3:78:08:1a:bf:dd:de:06:7c:df:d6:25:90:cd:c5:
                    62:4e:50:1d:fc:b2:7f:c2:69:3d:53:a9:fc:8c:d9:
                    fb:78:20:3f:b5:7c:90:62:e4:93:b6:eb:d2:f2:08:
                    1e:e0:38:e6:0a:d1:39:b4:fc:9f:6e:73:1a:56:6a:
                    65:5a:6a:f9:c7:30:51:ec:61:1e:bc:59:62:dc:40:
                    1a:36:20:3f:c4:5e:b9:3b:41:24:59:ab:0f:c3:bd:
                    c3:9e:1a:f4:29:9e:5c:31:6b:05:52:9d:a4:68:da:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:88:4D:32:85:FD:BC:2E:24:ED:33:BB:F6:FB:71:D7:B8:4F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d55c3a6d-4486-3f7f-ba08-446907978d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:dc:83:f5:5a:37:1d:93:38:5e:d0:1d:1e:3d:2d:db:50:
         e3:4d:57:ad:bd:34:3e:f5:fb:a9:cb:bf:c8:37:12:65:dd:46:
         5f:38:f8:ba:52:d4:2c:69:26:28:c5:57:76:60:d2:d1:8e:dd:
         3e:88:6b:03:78:0c:83:74:6b:22:4b:75:90:ea:d7:08:d6:e5:
         b8:a2:09:f2:d6:80:83:66:3b:a7:35:be:89:b9:b3:1a:7b:94:
         d0:81:18:14:e2:d6:b5:10:7b:d5:a7:66:09:db:dc:82:ef:8a:
         09:5f:e3:03:18:a2:9b:32:4b:27:13:0e:39:b6:3e:50:f4:cc:
         e3:f7:e3:ae:d6:2a:bc:87:ec:23:d7:10:df:eb:03:3a:cb:c1:
         c7:72:f1:ed:08:8e:75:0c:6c:70:0b:eb:53:63:49:14:03:3c:
         5d:58:3b:90:35:76:ea:41:58:ff:4c:59:cc:ec:fb:90:d4:aa:
         0e:cd:cc:ea:0e:1e:5b:f1:d9:eb:3d:ff:10:7b:8a:e3:59:e9:
         ef:9e:16:b0:88:7d:a9:bd:3f:4c:30:d7:9e:0d:3d:61:9e:ad:
         4e:bd:54:6d:75:e7:73:15:87:b9:fe:79:46:ad:fe:99:47:08:
         31:d5:df:d0:0b:e2:9e:ab:82:06:89:73:58:98:f4:4b:36:69:
         11:ef:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:38 2025 by rpki-client