Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa
File:                     fb0d467a-d8e5-3127-8587-61a576ea7462.roa (raw, json)
Hash identifier:          9QF0Wezi5g9xwGx1Y+g0oCU8kHr6CJKBvdfGQzri688=
Subject key identifier:   8E:03:52:55:0D:A5:0E:18:99:24:7F:45:4B:C4:80:44:49:99:C7:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8BE2361A62636EBB8740C970
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        2600:100f:b1e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:36:1a:62:63:6e:bb:87:40:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=271ae8bf-4a1c-4b25-9aba-2d681b59f251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:0e:95:08:dd:dd:cc:80:56:64:5d:f1:a5:
                    57:15:e2:54:27:fb:ff:4a:f2:2d:9b:a8:ec:64:39:
                    c3:10:4b:56:29:fd:19:cf:b4:f4:8d:dc:83:81:90:
                    52:78:72:4d:07:9f:89:d5:49:43:ba:b3:d8:3c:9b:
                    af:ee:b3:05:5c:ec:86:6c:7a:70:72:45:7f:88:d3:
                    a6:ff:d5:c8:43:80:f1:eb:57:59:5c:53:26:bd:7b:
                    cb:c7:09:f6:e3:20:5f:fb:c0:f9:b4:20:e0:c5:1f:
                    ae:5c:03:0b:4e:e7:b3:65:01:44:9c:15:e9:12:0a:
                    6a:d0:58:b8:51:c3:37:6e:4b:48:2a:44:66:f8:b1:
                    36:32:1d:2f:2b:dc:25:ce:6a:37:dd:4b:91:4c:a2:
                    fd:0b:05:09:c3:9b:f9:3a:8a:1a:55:3f:1f:b6:42:
                    65:23:94:9e:6c:db:d6:58:03:e9:6b:bd:cb:ae:fd:
                    86:e0:c5:67:55:71:fc:06:a9:69:c1:93:39:e2:ab:
                    26:ed:63:31:44:dc:22:d3:c1:d7:00:22:51:b7:84:
                    74:49:03:2c:66:45:86:82:9f:e6:d6:93:10:d2:b7:
                    5c:2f:e5:a2:c9:93:9a:5d:b2:18:c7:47:48:d7:c2:
                    39:40:68:6a:53:21:7a:27:a4:c9:69:18:39:0e:f8:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:03:52:55:0D:A5:0E:18:99:24:7F:45:4B:C4:80:44:49:99:C7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:34:20:1a:cd:41:1a:b0:59:8b:d4:bd:c5:a6:bc:ef:8b:9a:
         bd:de:60:06:c8:ff:84:88:52:a8:b9:a3:a4:fd:49:d8:10:af:
         32:60:f7:3b:60:fe:ce:7c:08:a3:81:d9:fa:5a:02:94:98:e9:
         3c:a2:71:fb:48:ba:9c:6b:8c:ba:3b:15:8d:6b:59:4d:7d:1e:
         44:e3:ae:d0:6a:fc:c7:56:6b:d5:9c:62:13:00:5a:0d:0a:2e:
         09:2e:4b:f0:91:b4:8f:f8:93:2a:2c:8e:9a:7c:25:64:db:c6:
         ca:76:de:6a:9c:e1:4e:c9:ae:5d:a4:7e:f2:f5:27:5e:f8:e6:
         8c:bf:d6:c3:8b:01:5c:9b:08:51:a0:cf:1d:b5:29:36:f1:02:
         5b:8c:65:f3:07:f2:21:98:ba:50:bf:8d:e2:b6:f1:d5:e2:8d:
         f3:43:a9:ee:f1:b3:51:df:2d:ee:c4:5d:a0:7e:85:e7:23:a3:
         07:1f:78:a1:d9:12:28:e8:dd:bc:9a:eb:35:ac:b4:fb:0d:31:
         3f:a6:c5:dc:44:55:40:91:61:58:ec:4f:81:4d:e9:3a:2a:a1:
         71:7e:21:11:d9:11:ee:66:56:de:c1:b8:98:43:d1:e9:ca:c7:
         1d:0a:e6:62:95:c2:4d:7f:e0:a1:4a:60:9a:57:91:84:d9:ff:
         1d:33:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:09:37 2025 by rpki-client