Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/385e4cde-983d-316d-8b47-c86ce8cce944.roa
File:                     385e4cde-983d-316d-8b47-c86ce8cce944.roa (raw, json)
Hash identifier:          JtL4W3hbSr7JFaHBEie3kHQL0KnOPjJCmsSBaIM2Ibs=
Subject key identifier:   9B:D7:D9:4C:33:BA:61:1D:7B:AA:72:23:E7:35:30:27:86:54:A8:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196C1F58E7F5AB6C8B5FAA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/385e4cde-983d-316d-8b47-c86ce8cce944.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2607:f160:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c1:f5:8e:7f:5a:b6:c8:b5:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c446dd8c-f7e8-4a5c-9197-be7172983df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:09:5b:56:ed:0b:9d:1c:05:a3:c7:73:38:
                    64:e5:52:31:07:b2:82:60:e4:f3:44:76:8c:f5:96:
                    97:5d:5a:c8:48:bd:cb:77:3f:1c:35:18:01:bd:1c:
                    3a:ab:b9:b1:e8:c3:91:9a:20:97:fd:ef:8c:b4:70:
                    50:04:a4:1d:93:ab:52:e5:5c:0a:b0:0e:9d:68:43:
                    27:63:1e:b6:4a:4c:87:30:2a:93:3c:63:3c:4a:5d:
                    40:d4:23:f3:9e:49:57:d0:58:a5:2a:ba:13:24:a9:
                    c7:ed:40:4c:e5:82:1a:0b:21:84:c4:80:d3:0e:da:
                    1f:14:65:72:24:8d:11:12:db:0e:55:bd:23:19:eb:
                    1d:ee:62:fc:95:cd:3b:59:f1:c0:db:70:43:8f:15:
                    4b:00:14:3c:0a:a8:5c:56:e2:94:df:eb:17:13:29:
                    94:8f:e9:65:e2:d9:fa:1b:b6:85:a2:19:49:59:eb:
                    71:b1:9f:c1:67:09:55:e3:47:ab:34:7f:ae:aa:f0:
                    ae:7e:e1:a3:a3:cf:89:ab:93:30:f8:c8:77:ea:24:
                    b6:33:fd:02:0a:4f:11:5b:43:cd:35:43:80:17:50:
                    5f:c7:29:b3:12:5d:9c:72:fa:b2:3f:b8:22:1a:a7:
                    a8:53:94:36:a5:15:b6:2b:b8:ab:5c:94:ad:c8:84:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:D9:4C:33:BA:61:1D:7B:AA:72:23:E7:35:30:27:86:54:A8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/385e4cde-983d-316d-8b47-c86ce8cce944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:6f:a6:17:9c:23:7a:5b:b0:40:0d:33:fd:5f:54:3e:1f:
         0c:f0:3d:65:b7:89:36:ef:d2:8e:b9:7d:5d:d6:6d:de:7e:7b:
         2d:a1:c7:df:0b:29:05:69:16:4e:32:ee:cc:60:24:d1:07:05:
         23:9d:ec:94:b8:ac:d1:bf:c9:89:e1:5b:62:d7:4d:02:38:ae:
         42:9d:fb:ea:4c:30:a0:4b:ce:14:41:2e:9f:ee:99:39:44:40:
         c9:da:1d:18:08:73:03:30:c5:69:72:a7:8a:f8:26:f0:6d:f4:
         6c:fa:1c:c8:11:8c:ad:6c:3d:03:a2:13:b1:82:24:60:91:6c:
         fd:cb:d2:5e:e9:e5:6b:72:66:59:7b:79:83:8a:d9:db:c9:41:
         50:76:cc:31:cb:9f:46:f9:b2:13:02:68:44:5c:ad:93:94:dd:
         99:29:62:76:aa:24:43:67:a5:49:6a:9f:2d:0b:ff:58:15:00:
         14:03:6c:e2:9c:b2:13:1c:93:ff:8e:51:e2:b3:10:aa:80:2d:
         06:14:27:67:7f:5c:55:33:21:79:b5:4c:23:e3:97:60:09:a0:
         de:6e:aa:b8:8f:5f:4b:2e:91:64:0c:89:1c:50:9e:be:88:e3:
         7a:7f:1a:7e:0e:ea:53:73:dc:fc:a4:a8:0d:28:d0:45:33:df:
         21:e7:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:46 2025 by rpki-client