Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa
File:                     2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa (raw, json)
Hash identifier:          feawmpwfUEbRQ3Ce7CkscLWccvF4vCFh5WkBWSQ2Bbs=
Subject key identifier:   7C:CA:9A:04:5C:6C:77:A2:85:56:BA:2B:EC:87:69:2D:40:F9:BC:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6E91FD8353BBD016428EE180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1015:a031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fd:83:53:bb:d0:16:42:8e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=01126f77-704d-41dd-87db-6796e0ab24ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:21:2d:c4:a5:c3:ff:59:0c:a2:85:2a:06:
                    e0:9b:49:1d:a4:28:fb:64:9e:ea:9f:3e:df:27:aa:
                    01:72:73:b8:66:45:e6:c0:22:5c:b4:34:90:96:f8:
                    47:0e:2a:ac:8d:a6:b7:04:b3:37:ea:11:08:8c:d2:
                    1c:1a:f9:37:c9:72:c0:bb:a8:7d:01:00:18:d4:db:
                    db:fb:ea:d6:a1:f6:b0:77:b7:d7:24:53:6d:cf:ab:
                    06:94:be:00:34:8f:4a:35:86:24:ad:13:77:08:94:
                    20:11:0a:80:9e:e3:b6:4e:69:ce:6f:95:5b:77:9a:
                    a3:ee:e0:82:d8:eb:5b:6f:42:a4:e4:e9:fc:c4:2e:
                    4b:da:f4:20:d2:d0:01:83:b3:3b:cd:b5:4f:5a:be:
                    00:d9:1c:25:33:70:4d:bb:84:c2:42:a6:dc:7e:b2:
                    5c:17:b3:b3:d4:ed:51:b0:58:f1:56:58:5b:b2:1c:
                    94:54:34:28:40:16:a5:cc:3a:88:81:46:04:3b:06:
                    8f:10:62:26:ee:1e:2f:a8:fc:b5:8e:cc:cd:42:99:
                    54:92:93:b4:8f:c0:90:03:0b:1d:99:2d:1d:50:45:
                    8a:18:1c:e1:38:c2:fb:0e:14:f2:1e:d2:b4:74:c0:
                    96:2a:5a:8c:6a:5b:81:be:3c:be:25:3d:a5:be:a8:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:9A:04:5C:6C:77:A2:85:56:BA:2B:EC:87:69:2D:40:F9:BC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:23:d0:45:cc:03:b8:22:5a:10:9a:1e:83:40:d7:b4:14:
         1c:92:fd:ac:6b:e3:99:be:83:28:4c:88:81:18:6a:88:f2:9e:
         3d:06:8d:74:ee:9e:01:ea:e5:df:48:d4:9e:69:7b:26:9a:cf:
         e8:3a:b8:63:73:eb:de:5f:68:6a:f7:1e:c4:31:88:2f:84:cc:
         46:a2:11:9d:0e:d5:22:3d:7d:3d:8f:89:50:eb:77:00:18:3b:
         44:e4:9e:17:f4:a2:9b:30:d2:b1:b1:9c:7e:78:f0:20:fd:ba:
         21:b7:d8:52:6f:d4:3c:ad:f9:c2:e6:f0:52:76:e8:2a:53:2d:
         3e:9e:12:d2:41:f5:94:e9:7b:fb:4f:21:32:7d:ee:59:29:df:
         4a:f9:84:08:ad:67:98:dd:11:48:77:61:e0:80:ba:3f:89:09:
         a4:73:fd:2c:dd:8e:6c:15:83:4f:82:b0:0a:0b:d3:60:ee:23:
         39:65:fa:85:a9:70:90:0d:37:45:42:50:d5:cf:2e:af:64:f8:
         d1:f8:f7:25:77:8d:91:42:78:0f:83:6b:16:ea:be:26:16:51:
         14:c1:79:00:57:f7:a6:ae:61:6a:db:f6:d9:8f:f6:4a:8f:53:
         39:fb:4f:37:cf:f7:44:93:2f:87:c3:b7:63:72:c9:0b:fd:13:
         d9:42:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:22 2025 by rpki-client