Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7155853-204d-300c-bd7c-0631808a11f1.roa
File:                     f7155853-204d-300c-bd7c-0631808a11f1.roa (raw, json)
Hash identifier:          oF677fq3OvObqEG+GEZ8l5Fv6js1HPT/F+4xGHNLiTE=
Subject key identifier:   82:23:4C:6B:D0:03:C5:CF:6C:1D:5C:CF:28:35:F5:06:2A:9E:13:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE2FBC5F302F69D6452F6F7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7155853-204d-300c-bd7c-0631808a11f1.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1016:b0c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c5:f3:02:f6:9d:64:52:f6:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=0f72e770-403a-4fbf-a2bf-90e0d2386f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:5b:d2:bc:74:26:40:9a:d3:d4:9e:e6:b3:
                    e5:a2:ae:ab:08:fc:b1:c4:d8:45:45:2d:90:72:55:
                    6f:a5:09:db:ec:2f:8b:d7:3c:c5:f8:a1:03:65:06:
                    6f:cc:a8:b4:7f:e8:7b:fb:af:5d:f3:67:01:24:5c:
                    98:b2:80:3b:34:5e:fe:f5:79:ba:0f:28:1a:58:61:
                    33:83:67:b8:6a:f9:46:be:ed:b4:34:a5:5e:27:2f:
                    cc:79:c0:10:7f:bb:6f:12:28:55:c1:5c:44:81:71:
                    b3:48:da:7d:da:8d:09:8d:73:bc:d5:a3:1f:22:69:
                    50:4d:fe:dc:69:64:7c:1a:5d:9b:ac:bb:2f:16:9c:
                    97:86:57:30:27:6b:92:bd:ee:5f:50:3e:30:77:ca:
                    8e:ae:8e:34:4b:94:96:ec:a2:2d:f8:08:7a:ab:6b:
                    5e:ac:1c:30:3f:fb:25:c5:81:37:7a:0b:3c:5d:6a:
                    45:75:4b:47:d7:17:67:7f:2b:9d:5f:fe:39:b4:3c:
                    8d:e7:d7:4b:ab:60:22:5e:08:27:30:18:40:b9:f7:
                    99:c3:54:97:a7:51:45:8e:83:40:36:cd:4c:13:fb:
                    05:22:a3:6e:7f:b5:9f:03:cc:07:cb:46:7d:9a:c6:
                    6c:7d:33:ac:01:23:49:d8:d9:9d:c3:aa:ff:7c:26:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:4C:6B:D0:03:C5:CF:6C:1D:5C:CF:28:35:F5:06:2A:9E:13:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7155853-204d-300c-bd7c-0631808a11f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b0c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:90:06:0a:a2:b2:d0:ec:f2:d0:fd:89:a5:b2:47:6e:27:cf:
         37:f8:1a:d3:51:26:1b:8d:8c:5c:dd:35:bb:48:33:8b:74:e2:
         6e:d6:f1:3a:c1:ca:09:90:38:32:34:76:00:a9:dc:d2:f4:f7:
         5f:ca:0b:68:97:7b:64:87:1b:5f:66:66:73:81:33:c9:26:16:
         08:a8:f4:68:5e:7c:bb:de:62:1d:85:2d:c5:9a:bc:70:62:91:
         2f:63:14:6a:c4:94:bc:c3:8c:27:2b:98:7f:ec:e5:72:2d:74:
         13:c6:12:bb:65:26:bb:a5:3e:0b:c9:f6:c3:7d:2a:17:4b:6e:
         c1:41:22:27:e8:5c:58:46:a8:77:ab:cc:4b:e0:6e:8c:b5:a1:
         78:ed:13:99:62:f5:cc:b6:7c:bd:66:36:9c:77:24:61:ee:ca:
         71:81:92:ca:b3:a0:d1:c7:1e:cc:4e:99:54:62:c4:64:e9:72:
         52:e1:8c:c4:4f:2e:cb:c7:cc:5a:35:d7:9b:93:0b:7c:66:52:
         2c:7d:69:a1:fa:d0:42:a2:2e:10:2d:60:f8:ea:d9:0a:59:af:
         a9:c0:67:d6:8b:09:6d:c4:be:f9:48:34:83:99:1a:c2:dc:2c:
         42:90:2d:52:26:75:98:fb:4d:8c:1a:d0:f6:fb:45:17:ea:4c:
         1a:85:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:47 2025 by rpki-client