Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
File:                     2357474e-3774-375c-80ba-4139f0e8b8a4.roa (raw, json)
Hash identifier:          Csegr0ywUSgEIhLpNtWvVYmzwstLPnhvKbmRZmtTQso=
Subject key identifier:   5F:67:2E:04:D9:EB:2D:5D:9D:AD:22:EC:33:61:1F:25:89:F0:43:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C4167E541205300B8860
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100c:b290::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c4:16:7e:54:12:05:30:0b:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a268d27f-3517-4221-af11-f111ad44f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:f2:0f:69:29:e5:3b:83:66:74:b5:16:53:
                    49:27:96:50:a9:a8:28:10:5b:7f:0d:9b:93:8a:ce:
                    5e:4c:b2:18:25:f8:6a:84:06:8d:25:d9:42:87:47:
                    e8:53:8b:95:a2:c4:b3:58:22:d1:67:16:4c:dd:16:
                    c5:cb:e4:2e:49:c9:45:80:64:1f:db:95:2d:b8:23:
                    f1:6c:c7:c0:8b:ad:36:03:71:e0:b2:b5:d6:46:3e:
                    a9:db:70:f0:4f:05:a5:6f:75:64:81:92:58:42:aa:
                    b9:44:92:b5:d2:55:68:7b:d2:d5:02:5c:7c:48:18:
                    fc:a9:ec:2e:9e:2c:55:e8:08:ef:cb:02:df:0c:f8:
                    a5:b8:f0:dd:e5:bb:89:fe:60:05:8b:f2:9f:6b:bf:
                    f3:05:55:e3:cd:11:e7:df:11:6d:7c:fc:7f:1c:8c:
                    75:48:22:53:5a:d1:c5:a7:84:76:8a:a7:1e:2e:39:
                    51:ad:55:95:0d:7c:a4:87:60:c1:d1:41:14:7e:59:
                    92:43:7d:8a:30:d8:80:60:09:c4:a4:0d:b3:98:b5:
                    2c:01:aa:ce:1c:d2:e5:5d:ee:27:fc:ac:60:31:a2:
                    70:b5:68:e6:40:1d:87:5f:1f:b9:b1:30:78:7c:33:
                    52:0d:08:c9:a3:97:b7:36:c6:d3:11:18:f4:10:a2:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:2E:04:D9:EB:2D:5D:9D:AD:22:EC:33:61:1F:25:89:F0:43:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b290::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:1f:b2:35:61:a7:fd:b3:0c:ed:60:f0:38:2c:f5:4d:e9:
         a4:cf:5e:5c:4a:7c:87:86:1f:8f:a4:2d:7b:9c:ac:42:61:01:
         8a:87:e8:11:5e:61:9d:26:d1:c6:ca:e1:b6:dc:67:4f:e4:98:
         bd:af:e3:bf:8a:31:1d:59:10:9e:c8:0e:bb:e9:0b:4d:96:32:
         1a:9a:d0:35:2f:98:99:0a:a1:fb:09:17:fa:8c:ba:f4:28:8e:
         51:85:07:b5:fb:5e:6a:46:8a:60:49:79:66:57:39:4e:f9:6a:
         92:ee:86:2f:b3:64:a7:a4:9b:c6:bd:98:e7:e8:4f:b7:25:8f:
         cd:98:21:1a:aa:36:c8:be:68:dd:3a:9c:bb:86:f7:c7:89:31:
         1c:2f:e0:24:cc:fd:3d:e1:ea:64:19:60:1b:18:6b:47:5c:50:
         bc:65:67:54:36:fe:1b:58:82:29:9c:ca:e2:63:17:56:c2:68:
         48:5f:7d:2e:76:c1:8b:58:dd:b7:27:d5:72:05:6b:22:68:47:
         75:c6:97:9a:61:f9:cf:7a:8a:a8:02:de:5c:6e:41:66:bb:c2:
         fb:42:78:97:67:58:1b:d2:0e:19:6c:52:a2:91:42:c4:99:7c:
         36:67:4a:89:50:05:16:29:88:cd:2d:3f:47:a0:ef:5d:01:5c:
         26:b2:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:08:45 2025 by rpki-client