Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa
File:                     7eb99614-9875-37e5-a726-4c2a6c756b63.roa (raw, json)
Hash identifier:          Gr9AHKsA7uX9R+SlAuFmuesNBmEhjmbtq/TpnS3RjZg=
Subject key identifier:   51:90:AC:1F:FB:CF:DF:E8:92:D1:BE:D5:61:6B:33:A1:63:88:73:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D56ADFFC8393D1F7DB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        2600:4040:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d5:6a:df:fc:83:93:d1:f7:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7d50a318-22cf-4032-aecd-2de520f9d8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:e1:d2:4a:4a:61:da:58:30:9a:9a:be:e2:
                    ad:ba:4e:35:15:b9:fb:6b:94:2b:cc:85:91:e1:18:
                    6f:41:86:51:03:e8:e5:2c:87:f4:98:3a:e8:38:3b:
                    a4:d8:99:14:95:b5:79:7f:4b:e0:d1:00:68:aa:61:
                    76:0f:50:19:71:cc:5a:17:3d:a3:08:16:4a:49:17:
                    6e:20:d9:ab:0e:ca:2b:66:ae:51:0b:b9:c7:13:3b:
                    da:95:8b:ed:d6:20:00:0e:f6:bd:7e:68:f8:42:63:
                    f7:80:c0:24:40:d4:a3:4a:93:dd:6a:db:c0:6f:9a:
                    c4:85:1a:81:5d:b6:5d:38:c9:4c:f4:27:c2:78:1f:
                    f8:fb:ae:a5:8d:48:64:f9:e1:5d:d4:c3:49:aa:84:
                    2e:7d:fd:15:69:cf:b1:f7:19:06:97:2c:08:84:df:
                    18:e0:1a:3e:f2:d3:b2:2a:19:b3:ef:0f:34:b5:bd:
                    b3:46:23:01:90:66:f6:51:51:ff:6d:bc:7e:2b:8f:
                    38:03:a9:53:05:71:92:5f:1f:a6:dc:a7:cc:56:c0:
                    7c:3c:20:af:28:fd:c8:e4:e1:bb:c1:b6:0b:b4:fe:
                    d1:af:fb:b2:14:8f:7c:46:ce:e2:d0:fd:3c:0d:84:
                    d1:ca:bb:0b:b7:24:14:5f:30:4c:c2:63:94:fb:62:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:AC:1F:FB:CF:DF:E8:92:D1:BE:D5:61:6B:33:A1:63:88:73:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7eb99614-9875-37e5-a726-4c2a6c756b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:33:db:82:f2:59:a8:90:cf:66:d3:40:d8:60:03:90:f0:
         06:a2:71:bd:4d:64:b5:cb:7f:7e:c1:03:a9:1a:d6:4d:32:98:
         dd:8a:d0:c6:67:ce:2d:21:f5:92:16:4d:18:ee:f3:48:45:56:
         7f:bf:c5:04:ac:24:4b:4a:ea:aa:72:6f:1b:4c:cc:43:68:42:
         85:de:e7:88:77:b3:9d:22:f4:1f:7b:e9:81:d4:2e:91:b8:8e:
         f3:32:d1:08:d0:2d:04:df:b3:9a:c6:0d:12:d5:18:ae:1e:29:
         12:c0:6c:df:d5:3b:eb:9a:a3:14:e4:be:c8:54:be:6d:3a:33:
         7d:4e:d9:d7:dc:1b:dc:43:be:e8:39:2d:da:e0:87:af:2a:ad:
         49:dc:e6:5a:58:95:6b:0f:e2:7b:63:e2:6d:83:d3:fc:3a:aa:
         22:28:be:30:f8:08:5c:ee:33:e4:4e:91:79:a8:80:59:a6:de:
         5b:af:bf:03:8d:a4:3b:fb:c8:fa:6d:dd:b4:e5:09:bf:3d:19:
         90:fa:df:b8:a5:d3:5c:b7:ba:f2:dc:0a:65:b4:9a:c4:7d:57:
         49:e4:a3:96:5d:94:14:cf:e1:9a:88:14:10:7e:67:00:bf:ae:
         95:06:e6:79:00:00:f8:c5:11:ae:26:ed:5d:87:7d:66:e1:81:
         2c:4e:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:31 2025 by rpki-client