Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa
File:                     ac646f43-11e5-3149-8847-8d8cbe659735.roa (raw, json)
Hash identifier:          KYFMp1zCRBIYsFogrhsf2vkzzKiFDNj0ELE+v7Oz84g=
Subject key identifier:   0C:A2:A7:D0:DA:A0:74:C3:E5:DE:A0:06:4F:2B:4D:87:7F:3A:7D:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9B67FB30130C9482E1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2600:100a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9b:67:fb:30:13:0c:94:82:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d651dd2f-b03c-4e79-9836-d267f9b05bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:0d:19:ca:4a:02:53:0d:9b:54:33:e9:88:
                    fe:38:3b:69:03:ff:a2:1a:1e:01:f7:c0:15:89:bf:
                    c9:44:ca:cf:88:3f:48:b6:eb:ab:56:ab:5d:ec:ff:
                    03:bd:83:ba:35:7d:0c:10:d1:44:9a:7e:e3:98:92:
                    10:bd:6f:91:15:20:90:fb:93:fe:54:21:64:37:3b:
                    2d:89:ce:ce:e9:ba:49:86:38:75:b4:99:cf:34:fd:
                    20:cb:6e:05:be:5f:39:c7:e2:4f:9f:31:e3:00:6a:
                    2b:54:52:d9:4d:e6:b1:4c:2a:ad:42:24:e2:8c:22:
                    d7:eb:7e:6a:4d:f0:d8:f4:d0:e3:c4:81:3c:e6:d5:
                    06:ef:b6:d0:db:47:c5:95:f8:23:0b:12:36:2c:a4:
                    ab:ff:32:37:5c:26:a6:68:4c:c9:1f:b2:9c:b6:ea:
                    23:7c:26:a3:23:b5:cc:88:e5:bc:c8:50:de:23:ed:
                    b9:91:72:fe:8e:e3:e0:68:c1:85:09:8b:08:bb:7c:
                    59:cb:04:85:93:56:1b:2c:37:f6:74:9c:cb:e2:58:
                    1d:b0:95:32:48:9a:18:42:d9:1f:d5:5e:8b:28:bd:
                    35:4c:50:a7:22:4b:f9:8d:7a:74:70:44:72:10:5e:
                    93:1f:f2:40:94:28:7e:23:79:7c:02:50:d4:5b:56:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:A7:D0:DA:A0:74:C3:E5:DE:A0:06:4F:2B:4D:87:7F:3A:7D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:16:19:e0:87:bf:83:0e:1e:35:9f:80:1f:ff:cc:17:b2:
         de:3c:30:a1:ea:29:cf:1c:9c:3a:e0:86:7f:db:11:93:08:8e:
         4c:94:b4:5b:1e:8a:a1:5b:48:80:0a:ff:0c:17:82:47:42:78:
         b6:35:ae:fb:7e:0a:f1:7f:ab:f5:b0:f7:16:5a:fb:80:8c:d1:
         75:8c:4c:2a:2d:dc:b6:9a:dd:19:e5:9a:94:70:91:41:c9:3d:
         13:61:bd:cd:3e:a5:bf:a3:33:22:07:78:cf:79:18:8e:82:04:
         ed:c0:23:e3:c3:a5:e3:39:29:68:d9:52:ad:9a:03:49:32:52:
         60:27:35:e8:1c:b6:df:64:b2:89:28:3f:36:14:56:9d:ef:a6:
         59:c8:4b:97:87:3a:41:22:bb:ce:31:fa:fa:b5:9a:53:d3:fe:
         61:6a:2f:2a:7e:17:83:71:94:a1:67:bb:d8:e6:77:9b:64:be:
         a6:23:5b:1b:42:bf:f8:cc:89:f2:ce:15:67:f7:92:3a:e2:0a:
         31:29:d6:bc:92:34:6f:a7:bd:8a:56:43:87:c1:e6:34:37:ae:
         1c:19:7a:fa:24:68:40:5a:28:ad:ec:15:11:7c:9e:61:fc:be:
         77:85:97:eb:21:e5:db:2c:83:e2:b5:48:24:d7:46:23:1d:e8:
         30:35:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:36 2025 by rpki-client