Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b73243a-8bf6-394a-9e76-5fedf0795601.roa
File:                     6b73243a-8bf6-394a-9e76-5fedf0795601.roa (raw, json)
Hash identifier:          09IgTx8sTX+o5Dx/2GHPNzYJLRhgm3IJ2srxsgIHKdU=
Subject key identifier:   FE:E1:B9:18:16:FC:65:0E:E5:20:8D:B9:AC:37:C1:CF:FE:4E:9A:E9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8411934533C5F06A8F932700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b73243a-8bf6-394a-9e76-5fedf0795601.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        2600:1900:8011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:93:45:33:c5:f0:6a:8f:93:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=73f70ac8-77a6-4f2a-930c-3c72eaccf1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:ac:ce:a3:01:af:62:5c:7e:a3:c0:77:6a:
                    a8:4f:6b:fc:5f:ca:4b:b9:ec:91:7e:80:9a:98:85:
                    3d:59:6b:98:ba:ef:a8:45:9c:be:b1:dd:39:03:b6:
                    5e:6f:e8:ea:9d:11:b4:39:0b:14:e7:c8:09:4c:83:
                    ff:4b:3a:4e:65:d3:e9:d2:7a:89:7f:77:ea:04:21:
                    ed:ab:a4:e6:bb:59:0f:70:07:17:86:65:45:83:b1:
                    c0:86:b7:72:75:a1:02:79:81:a9:4a:0a:cc:39:de:
                    20:4a:9f:58:f1:79:85:85:71:8a:95:79:be:b8:e3:
                    62:3f:3d:98:ea:66:bd:89:31:5d:44:6b:3d:8d:db:
                    46:59:e3:3c:f3:80:3a:96:fa:08:fe:cd:6c:96:6d:
                    cd:d0:47:91:7c:61:7a:45:78:ee:fd:cc:5a:d1:e5:
                    82:91:77:ff:da:06:0f:df:93:17:c0:37:a1:48:6f:
                    30:7e:36:5c:bc:ec:60:a6:0f:f0:dd:43:43:28:4a:
                    3e:c8:3b:2c:f2:c0:19:e6:96:d0:02:04:50:ed:9d:
                    37:38:41:15:d2:42:8e:30:c8:90:d6:c1:ed:10:f8:
                    18:d4:47:4a:af:6c:83:fd:41:30:9b:99:37:35:0c:
                    63:33:5a:64:c8:35:21:d4:0c:d1:ec:df:e8:3a:b4:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:B9:18:16:FC:65:0E:E5:20:8D:B9:AC:37:C1:CF:FE:4E:9A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b73243a-8bf6-394a-9e76-5fedf0795601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:8011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:6e:12:fb:cc:10:26:4b:64:a3:af:f2:61:5c:0b:78:9b:
         79:fd:bd:3e:03:ab:a2:43:bb:22:a7:77:69:52:b8:d4:e9:9f:
         5e:d8:0d:65:99:fb:72:ea:67:83:53:36:90:c5:ee:af:3f:1b:
         8d:59:8d:6a:cd:35:49:79:1b:60:d6:fe:3f:a7:20:9b:85:ee:
         1b:44:56:b6:9b:2c:31:3e:79:cb:26:94:73:e5:90:68:dd:df:
         dc:e4:c1:1b:36:7b:64:03:35:0a:5a:60:24:da:44:49:55:39:
         ee:7c:10:bf:a9:b7:f8:a1:14:c8:e2:a1:8e:79:57:e6:a2:d7:
         7b:1f:1e:66:3a:c0:0d:7a:e0:42:fa:62:9d:9c:2e:d5:f6:df:
         4b:ea:09:bd:36:26:6e:fc:68:b5:dc:32:37:d2:3a:53:94:25:
         4c:12:93:7d:5b:b9:0d:07:fe:b5:a5:83:44:53:88:ac:3c:1c:
         37:80:80:d6:0c:dc:f9:c5:8e:a6:a0:f2:07:96:34:61:a8:58:
         e8:7c:b1:ab:03:43:f6:0d:0f:ea:b0:7b:62:79:19:df:b8:96:
         6d:87:ef:46:7e:24:7e:7b:20:de:e2:68:26:e0:cf:e3:b0:62:
         c2:fd:e5:a0:49:99:86:2b:90:e6:8c:b7:c5:5b:c8:2c:2a:70:
         e5:1b:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:39 2025 by rpki-client