Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c084aa55-8d80-3e36-9605-d6ceb38d2bd1.roa
File:                     c084aa55-8d80-3e36-9605-d6ceb38d2bd1.roa (raw, json)
Hash identifier:          WkKTM1iiJ4UjS8t/udYbNEn0VMtHNBW28hbEiHYHHn8=
Subject key identifier:   01:64:D7:F5:87:64:69:95:09:77:32:9A:1A:25:B5:94:8B:D1:87:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2CF71C85E29703BFDB620400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c084aa55-8d80-3e36-9605-d6ceb38d2bd1.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1014:b0b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:1c:85:e2:97:03:bf:db:62:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=cefe8b1b-79f6-476c-b578-cfdbbe8a5e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:43:b6:02:f0:bf:2b:52:30:aa:42:68:c6:
                    b6:2e:0d:8a:15:c0:13:bf:7e:ea:0d:83:c0:55:c8:
                    bf:77:b8:20:ef:29:4a:4d:a1:70:b7:74:f3:78:88:
                    55:4c:40:eb:35:1d:7e:5e:a5:32:be:d3:1c:8b:22:
                    ce:d7:be:f2:70:86:2d:4f:6b:f8:64:93:d9:62:69:
                    ce:f4:2b:7c:2b:b7:c7:8f:ca:36:e8:b6:19:0f:d8:
                    c3:56:93:61:88:7a:58:db:04:6f:81:05:80:d2:b4:
                    94:cd:72:1b:52:c8:66:7e:b6:f3:ab:bc:37:07:f4:
                    41:d9:5a:47:b8:e2:48:fb:ed:7b:ba:df:94:b5:6e:
                    73:8d:67:ef:10:50:fa:6b:07:71:3c:3f:7c:47:bd:
                    10:c9:dd:92:e1:56:4a:99:46:23:e9:d1:f5:b0:1a:
                    55:15:ad:13:78:71:7d:65:26:59:f9:ac:b9:58:5d:
                    26:8b:c8:26:f0:47:7b:5b:83:c3:d2:39:fa:09:93:
                    5d:d0:07:c3:7b:b8:48:ac:a4:1d:fd:5e:8d:77:86:
                    7a:05:64:ea:0b:e9:49:62:49:53:70:bc:91:a5:2b:
                    f1:82:a6:79:10:2b:9c:d5:d3:2a:3d:a6:22:b2:d2:
                    29:3a:52:94:02:4d:79:27:06:06:84:29:bd:6e:a7:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:D7:F5:87:64:69:95:09:77:32:9A:1A:25:B5:94:8B:D1:87:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c084aa55-8d80-3e36-9605-d6ceb38d2bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b0b8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:22:c9:67:89:d4:ac:e6:77:2c:a2:9b:ec:78:4b:5d:53:fa:
         a8:e6:79:a9:c5:ee:ad:7d:06:47:43:07:20:17:7b:45:8d:d7:
         87:3d:77:8e:43:bc:7d:d3:ca:51:6b:c9:df:28:45:76:59:32:
         ad:24:80:02:9a:b5:fc:29:8e:49:d7:e5:98:71:72:84:06:24:
         c7:c4:72:96:8a:5e:d8:d0:9f:b0:ff:5c:92:e5:d9:eb:82:64:
         21:12:ce:a1:40:3e:57:ed:6a:2e:ea:72:a4:9d:84:8e:20:29:
         d0:ef:cf:3a:24:dc:33:ca:ab:40:6e:0d:17:a3:22:eb:c5:2a:
         7f:58:79:15:fe:aa:69:7a:f2:3a:80:d6:69:ce:04:7a:15:24:
         f8:ef:d7:7c:56:59:d9:25:9e:93:27:34:3d:0e:40:e6:f8:0f:
         36:bb:32:f5:e6:50:56:18:d1:df:b5:a9:68:33:9f:36:ab:5e:
         38:ea:98:10:bc:d6:05:80:b0:a5:b0:df:7f:2e:56:74:9e:71:
         2d:fa:0a:b8:d5:b2:b3:30:45:5e:e2:54:c6:c4:e3:c1:3f:8d:
         37:28:37:66:25:f3:f6:41:52:60:3d:d4:9c:5c:0a:3d:53:db:
         5d:cd:e6:00:e9:c3:06:29:f2:2a:98:f0:43:58:f4:7a:6d:4f:
         21:8b:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:05:01 2025 by rpki-client