Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7be2fe91-a611-3ae2-80a9-7a04b7adbdda.roa
File:                     7be2fe91-a611-3ae2-80a9-7a04b7adbdda.roa (raw, json)
Hash identifier:          n/JcAXWTZsiBhI9bnpQvSAqArZEHCjRmemComHxM+iI=
Subject key identifier:   7A:78:C9:64:0F:84:49:C0:AE:0B:9E:26:23:AA:BE:0A:46:2A:E5:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20C92FA6ED943ED495EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7be2fe91-a611-3ae2-80a9-7a04b7adbdda.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1005:a130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0c:92:fa:6e:d9:43:ed:49:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=f2b0553b-2169-4987-a514-750c5f985597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:45:43:2f:8b:6e:0b:0f:93:9e:3f:0d:a7:
                    32:bc:49:2d:f7:c4:c5:b6:7f:e7:2e:60:ca:64:bc:
                    58:ce:12:d3:1a:ca:cf:15:e8:8f:94:96:61:79:37:
                    9f:68:31:31:f7:02:32:12:4c:fc:1a:5d:aa:0b:0c:
                    96:79:59:08:1a:3e:09:ce:08:21:5c:75:7a:0b:ab:
                    c3:96:50:c7:6d:39:15:bb:13:c6:c3:56:7f:2c:5d:
                    e4:4c:6a:f8:1b:20:a7:9f:0e:0f:d2:d5:29:70:a1:
                    9a:e7:c7:33:5c:89:92:1e:cd:dc:1a:d3:eb:1e:5c:
                    3c:a0:a3:97:ee:85:71:8a:b4:29:75:e5:7c:60:4f:
                    cc:3a:5e:50:a9:fd:50:c7:92:6f:7f:82:81:f5:88:
                    f7:3e:d3:8b:10:46:ec:e9:bf:d5:8b:5e:c8:95:0e:
                    78:f8:04:37:e7:a0:41:22:75:b7:1c:79:87:c6:66:
                    24:c8:bb:40:b4:9e:cd:1c:a4:26:fe:d4:4a:d8:55:
                    1a:41:d5:63:d3:76:66:e7:96:ab:a6:0f:dd:56:4b:
                    bd:97:9e:da:a2:d2:06:d0:de:6a:4d:f1:5b:c5:92:
                    bd:3b:49:98:31:ae:87:b9:98:fe:3d:71:c1:af:8d:
                    ed:53:fd:4e:56:de:04:55:bc:44:30:65:b2:21:1a:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:C9:64:0F:84:49:C0:AE:0B:9E:26:23:AA:BE:0A:46:2A:E5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7be2fe91-a611-3ae2-80a9-7a04b7adbdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a130::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:2f:68:e8:20:ba:e3:ac:58:67:fb:ae:a4:b1:19:4b:f6:
         e7:04:1b:6d:0c:4a:9a:6f:85:70:ac:4e:cf:d1:0b:5c:53:48:
         29:a7:8d:15:eb:50:3f:97:18:d8:9c:bc:d5:59:7e:f0:54:3b:
         98:1d:30:b4:a4:9f:d7:9b:48:8c:5c:de:f9:75:6f:55:b8:95:
         f1:6a:8a:db:8e:f6:91:f6:c5:6a:83:d1:97:28:57:0c:db:fb:
         11:96:64:e9:e4:8d:11:fe:45:d7:78:5c:c2:e8:6e:bc:b8:f5:
         1a:a6:13:8f:6b:6f:ac:ee:51:92:39:e7:ce:de:1a:fb:69:c8:
         4f:0e:8e:61:d3:8f:52:03:9b:10:cc:e2:c2:7d:ae:19:6c:be:
         65:bc:76:bc:40:b0:d8:f2:41:0d:e0:af:75:6d:9a:27:9e:d0:
         0a:e1:0f:3b:97:44:16:8b:94:3f:f4:27:a2:92:79:f4:32:56:
         d9:32:88:16:bf:a5:04:ac:55:f4:58:3c:de:e7:7c:7a:19:b6:
         ca:66:b6:27:75:59:3e:55:98:02:1f:14:1a:e1:4c:a8:35:20:
         31:dc:9d:2e:6b:31:37:21:34:38:48:22:5e:5c:33:d4:aa:d5:
         35:09:9c:b4:53:e4:9c:1e:92:c5:21:0c:84:95:05:28:7c:bd:
         39:c8:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:35 2025 by rpki-client