Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9b24df2-f6fe-3250-8e09-38577cb7bb51.roa
File:                     b9b24df2-f6fe-3250-8e09-38577cb7bb51.roa (raw, json)
Hash identifier:          0bl5O7lsQBPOPw4FrKvvkjeesOPlOWISJXOz2Vx0ATo=
Subject key identifier:   D2:63:5B:D3:D5:D2:1E:02:93:19:2D:B3:9D:07:11:F5:98:57:47:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196C2D00B25AA64EE42C300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9b24df2-f6fe-3250-8e09-38577cb7bb51.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2607:f160:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c2:d0:0b:25:aa:64:ee:42:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=20ce9e6a-b2ec-4a07-829f-3ffc793a4c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:0d:9c:95:50:06:3f:7e:03:ae:d4:d1:39:
                    83:20:eb:d8:05:39:30:eb:9e:fd:39:2f:01:42:aa:
                    e8:9a:dc:c2:65:47:54:1c:b2:be:72:5d:d8:5b:38:
                    e2:eb:4c:7f:29:83:8b:a9:42:4b:14:64:cb:37:f3:
                    7c:97:ab:a6:37:93:08:aa:16:4b:53:7c:7b:72:95:
                    e8:71:1b:ac:a8:1a:94:6f:ea:22:c5:e6:76:9c:37:
                    95:b5:20:9d:cf:a5:80:86:93:cb:43:73:80:2c:0c:
                    55:a0:84:c6:1a:d2:82:6f:b1:0a:b6:bc:83:c6:67:
                    20:9b:02:a5:e2:0f:49:13:e7:fd:10:51:bd:52:91:
                    b4:01:ad:79:70:f6:f0:49:7b:a2:cb:e7:74:8d:b2:
                    78:df:4a:1a:11:86:fa:c4:ac:03:35:6b:51:79:08:
                    90:13:18:89:59:5a:e6:14:b9:c3:19:c8:37:50:29:
                    6a:e9:31:fe:78:4f:c8:61:43:d5:db:60:55:8a:c9:
                    b4:01:e1:e0:d5:e6:87:77:37:67:78:b2:06:64:13:
                    7d:49:a9:6b:af:d4:d4:f9:19:c0:ed:65:11:99:14:
                    91:5d:bd:b6:a9:92:81:03:b5:b6:de:6b:8f:56:07:
                    9f:f4:87:0d:b9:e6:9d:8e:28:0c:74:7a:7c:0b:64:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:63:5B:D3:D5:D2:1E:02:93:19:2D:B3:9D:07:11:F5:98:57:47:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9b24df2-f6fe-3250-8e09-38577cb7bb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:1d:a0:18:bf:85:9c:18:9f:2f:cb:15:42:2c:ea:6e:66:
         9f:f8:f7:b5:77:99:4e:f5:b5:18:89:f4:76:69:d4:05:69:58:
         7d:53:af:1c:ac:1d:76:8c:9d:7d:b9:2c:d3:56:2c:da:15:aa:
         b0:be:8f:44:8a:ff:ce:9d:04:71:8c:8b:8f:cf:55:c0:09:ab:
         a2:98:65:bd:75:19:2d:5f:78:d3:67:f8:35:77:06:05:bb:16:
         2c:8e:1b:47:60:8b:98:da:44:9c:a3:5a:8e:88:e4:60:e4:9a:
         90:92:a7:9a:f5:4c:27:37:38:69:fe:88:5a:52:89:bc:47:55:
         0e:cd:10:c8:bc:fd:e5:61:70:97:57:11:d6:cf:65:14:92:8f:
         3e:39:d8:1c:d6:7f:60:67:f7:0e:1f:45:31:5d:4d:56:0f:59:
         3c:19:38:cd:30:59:46:59:91:2d:97:97:c6:86:94:eb:14:52:
         16:d4:55:00:88:81:ac:b2:5c:35:2d:20:2b:ca:ae:58:fa:98:
         db:aa:c4:0f:00:84:03:5d:69:55:ee:72:f2:4c:c7:dd:eb:eb:
         46:52:d9:17:8f:4f:8d:d1:64:c8:f0:9d:45:12:a2:82:0f:57:
         27:a9:67:89:ee:9a:92:fa:3d:35:69:89:43:a3:20:af:8d:c9:
         47:4b:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:00 2025 by rpki-client