Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
File:                     41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa (raw, json)
Hash identifier:          g4NcfQLxmrKvn21tzt2uY2K8l2PagyijjvkwDXNqH6c=
Subject key identifier:   38:F4:B7:57:ED:0B:18:29:1E:6A:A8:FB:2C:33:FF:15:46:E3:BC:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D4E6A4286D158FFD6280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        2600:4040:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d4:e6:a4:28:6d:15:8f:fd:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c7d39df6-c927-44d0-86b6-b6b94dc170e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:2f:8e:d2:db:87:80:0e:64:db:54:df:b3:
                    36:af:72:ec:56:a2:46:cf:37:e7:67:67:fb:1f:07:
                    44:ad:e0:ed:af:50:78:29:d6:89:4d:df:42:48:9d:
                    da:e8:a6:eb:44:03:78:04:78:d3:a3:9a:05:ca:41:
                    de:16:85:e0:fc:c9:3a:ee:8b:0f:79:0b:26:00:8e:
                    87:b1:85:bf:6e:2f:42:59:2c:78:da:ca:7e:97:4b:
                    da:8e:d1:42:3d:6d:da:7c:e6:ce:ec:e1:b4:4f:af:
                    6c:12:15:a5:ec:41:5e:45:35:92:bb:54:95:01:ce:
                    a3:0e:66:63:12:53:f5:fa:d2:25:bb:09:0a:3f:0e:
                    49:e1:c8:e5:0f:5e:7f:6f:7a:38:e0:36:50:74:0a:
                    bb:e7:43:94:cb:1a:ac:92:db:22:8a:03:34:ea:a8:
                    d0:de:81:3c:7b:7c:2d:ac:b5:c6:12:f4:ed:de:e3:
                    26:f1:84:22:2d:a5:a1:a7:e7:2e:c3:9c:a2:cb:6f:
                    cd:27:22:c8:bc:66:9e:24:26:a6:da:36:a2:71:a1:
                    67:49:8a:58:33:fc:2a:53:0a:b5:ad:e1:ca:1d:a3:
                    8d:5c:e5:09:46:11:af:f0:8a:a3:8a:e6:8d:bd:f1:
                    07:54:4a:44:3b:94:85:d1:da:36:b4:23:e7:7b:9f:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:B7:57:ED:0B:18:29:1E:6A:A8:FB:2C:33:FF:15:46:E3:BC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:6a:a2:04:dd:13:41:a0:d4:34:8c:e1:22:a7:19:c7:91:
         aa:09:b2:2f:be:47:4b:e5:ba:95:f0:e3:32:ec:eb:10:c3:3e:
         1c:96:69:b7:70:67:96:0e:ea:51:11:80:17:c2:c3:bb:d9:d9:
         83:db:6f:4c:9c:ef:c5:ba:92:f4:3c:eb:b8:b6:7b:fb:59:43:
         28:0f:7c:24:34:c8:d8:de:f4:ed:31:a4:75:4c:6f:c1:57:f7:
         58:57:d4:05:31:69:8e:8b:4e:ba:90:58:9f:6a:84:c6:e0:1f:
         b5:06:b8:0e:41:78:07:3e:97:ec:39:b9:7a:15:85:ef:a7:57:
         e3:39:8c:11:b3:62:36:f7:0f:49:4a:54:cd:41:cd:e1:42:e0:
         df:5c:4a:6a:0e:b5:4b:45:ae:50:9c:57:7a:75:85:d5:02:24:
         e5:a3:0e:96:7f:e5:bd:75:a9:89:d9:f2:dc:d4:5f:7a:d9:12:
         de:00:01:ae:fc:d9:a0:3d:8d:5f:8d:37:c7:7e:cf:69:0f:b8:
         56:85:f0:76:37:eb:f7:86:29:34:8f:29:47:bc:26:ce:63:e1:
         8c:21:c6:40:b2:bc:85:70:59:8d:1a:21:0a:93:14:43:59:af:
         68:7b:3f:15:39:9a:46:45:80:9b:d9:fc:98:9c:4f:24:79:14:
         90:e8:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:35 2025 by rpki-client