Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f10c815-b125-33b1-9ea6-00dc5ca34e13.roa
File:                     2f10c815-b125-33b1-9ea6-00dc5ca34e13.roa (raw, json)
Hash identifier:          2YiFZT6e30X2N0JYZ55ILTwVIkSCiCEI2YIeHXQ45g4=
Subject key identifier:   C4:2A:7C:1F:9D:C4:26:FC:36:60:AA:17:47:49:BE:54:7F:82:90:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD5C33A1688B4131137FAC380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f10c815-b125-33b1-9ea6-00dc5ca34e13.roa
Signing time:             Tue 12 Aug 2025 19:21:18 +0000
ROA not before:           Tue 12 Aug 2025 19:21:18 +0000
ROA not after:            Mon 10 Nov 2025 20:21:18 +0000
asID:                     6167
IP address blocks:        2600:100d:d020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:c3:3a:16:88:b4:13:11:37:fa:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 19:21:18 2025 GMT
            Not After : Nov 10 20:21:18 2025 GMT
        Subject: CN=07dfc7fa-b6c9-4751-b344-a649fe57790b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:ec:4f:26:30:f9:9d:a6:b5:63:e8:b9:e5:
                    03:0a:91:29:25:19:f6:fa:e2:3b:3e:ee:42:5b:3c:
                    de:ee:40:a9:a6:6e:00:81:15:01:d7:73:f8:b8:bb:
                    bd:f4:1f:c3:69:e4:54:d2:00:25:9e:26:e4:c4:75:
                    a7:fe:20:e2:c6:a3:e5:ef:d1:b6:11:db:a0:0c:68:
                    1d:1d:77:17:23:88:42:a4:c2:bb:96:20:0d:c3:d4:
                    7e:25:17:f0:18:9c:80:b4:69:77:13:4f:0f:e0:c7:
                    46:75:ae:7e:93:5b:24:55:90:19:e6:bb:ec:7e:2f:
                    6c:80:73:cb:96:c0:7e:8e:96:61:96:9b:ad:f1:55:
                    f3:f5:be:0c:86:f8:e7:1b:f7:93:1f:f3:3c:e9:4b:
                    e1:48:0b:11:ca:3a:29:34:60:f2:14:16:6e:7d:cc:
                    17:32:f3:24:fa:02:7e:f8:95:f1:13:2d:f2:5f:89:
                    65:80:fe:90:8e:5c:32:2a:1a:69:32:b3:5d:e7:cd:
                    20:6c:59:65:05:59:41:78:ee:91:fb:5f:3a:a9:8a:
                    0a:7f:d9:4e:ac:ff:6d:39:0b:8e:37:c6:0c:0a:9c:
                    6b:43:19:26:cc:7d:8f:7f:ea:3b:af:87:25:fe:44:
                    12:5d:c5:1e:30:d4:72:9e:bb:cc:ea:0e:b6:bb:fa:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:7C:1F:9D:C4:26:FC:36:60:AA:17:47:49:BE:54:7F:82:90:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f10c815-b125-33b1-9ea6-00dc5ca34e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:01:65:0b:55:03:5d:95:93:75:ba:e0:ed:b6:04:34:50:
         d4:f5:59:a7:e4:ef:08:62:14:00:e4:ee:f6:02:35:5b:6f:06:
         2a:1f:66:9f:57:94:3f:ec:de:64:7a:4e:c0:3a:29:2c:fb:6a:
         a1:49:39:3a:5c:8c:38:7c:5c:bf:31:e8:b8:01:6d:64:f3:b4:
         18:8b:82:e5:c4:f8:77:8e:95:38:f9:af:d5:09:55:36:56:32:
         92:6a:8f:1b:51:8d:85:45:05:09:5f:8e:da:fb:00:81:c7:83:
         f6:9d:3f:9b:0f:13:3a:f1:d4:a6:54:81:6e:f1:6e:5d:16:8c:
         f5:79:f8:a1:24:04:6f:1e:5f:84:70:15:1a:b8:63:d6:fa:a5:
         5a:95:51:d2:ce:49:61:c0:32:05:f5:9d:56:23:c3:76:f1:0b:
         15:5a:b7:ce:4f:6b:13:de:09:2a:bc:8d:b5:4f:e8:79:4e:34:
         11:f3:32:61:83:d4:22:f4:c6:4f:f2:0d:20:e0:41:9b:d6:05:
         1f:db:04:72:1f:7c:6c:3f:b2:ea:ee:db:4e:b4:46:5d:b7:4e:
         f9:36:2d:14:4a:e5:04:0b:f0:ee:ef:fe:3f:97:a3:df:30:e2:
         31:67:55:6b:88:09:e6:2b:e9:61:c8:92:a7:d6:40:ae:cf:87:
         eb:3b:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:13 2025 by rpki-client