Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b3227a9-e329-326b-89a4-8d40d2b01c40.roa
File:                     2b3227a9-e329-326b-89a4-8d40d2b01c40.roa (raw, json)
Hash identifier:          215/wLAGSK1el45TAmgol9Ygk/8zJ0WPgr4E0uAOA+8=
Subject key identifier:   7B:43:A2:1C:64:74:86:DE:58:E2:06:88:5C:6D:64:73:BE:AC:6D:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B11CC4152EFC48A8B400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b3227a9-e329-326b-89a4-8d40d2b01c40.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100f:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b1:1c:c4:15:2e:fc:48:a8:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=85233f60-9305-4f97-be15-f21315995576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:27:84:e5:0f:9c:5c:90:b9:63:fb:dc:3b:
                    5e:9a:cf:e6:ea:f1:f9:1e:03:28:cb:8e:40:88:12:
                    3b:66:f3:d7:6f:86:de:12:72:ea:99:46:f6:a5:8e:
                    52:f5:8a:2d:61:0f:81:f4:98:2f:8b:1a:ef:a7:dc:
                    65:f6:83:b5:de:08:90:aa:31:4f:80:3a:64:c0:2a:
                    ad:78:c8:2b:83:03:16:b9:7b:09:c9:73:c4:13:3a:
                    73:7e:9d:e8:fe:36:ad:7b:b6:f4:87:16:0f:4c:50:
                    b0:22:d0:ab:f8:5a:5d:16:2c:b3:d2:06:3d:bd:6a:
                    f6:db:70:92:a7:25:7a:6c:bc:64:83:91:96:80:b3:
                    d9:52:87:99:f9:d4:45:d5:22:33:ca:82:d3:ca:b5:
                    06:7f:d5:ed:ab:86:09:dd:ad:89:15:a1:b7:20:fe:
                    ba:8f:a0:09:80:d3:ca:6e:9b:70:28:9c:76:22:6f:
                    f2:ee:0b:95:16:62:a6:5e:21:20:e8:fc:3a:b7:b7:
                    05:5c:d3:33:fe:fd:d9:f0:e6:38:43:27:71:fc:08:
                    83:8c:0e:d4:6a:c4:44:d5:5e:d5:af:6f:bf:ec:a0:
                    c4:aa:f7:cb:14:02:02:8a:b1:01:00:02:13:ef:7d:
                    c1:f8:60:20:38:69:c1:bc:3e:74:8a:35:16:5d:11:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:A2:1C:64:74:86:DE:58:E2:06:88:5C:6D:64:73:BE:AC:6D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b3227a9-e329-326b-89a4-8d40d2b01c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:a9:52:8c:78:c8:a8:78:ef:eb:ef:7d:a2:1d:3e:86:3a:
         40:09:ab:57:af:6c:ba:2f:32:01:15:a1:7a:3e:42:70:02:c7:
         ae:dc:f8:e3:cc:da:3b:26:2f:fd:aa:e7:fa:56:52:11:4c:7e:
         bb:2b:9d:42:86:79:ae:c2:aa:45:e5:2f:11:e2:16:ca:7f:19:
         4e:77:22:7d:f4:f1:4c:7b:a9:84:95:d5:81:25:d0:7a:70:d3:
         fa:fc:5b:79:a6:89:52:21:d7:08:c6:49:42:4b:0a:c5:d6:b4:
         0e:5d:bc:5a:b3:02:47:ab:f4:1f:ab:ee:72:7f:83:64:ae:25:
         1a:2d:b0:89:06:22:23:53:d3:36:d1:90:6a:bd:b8:8c:de:92:
         6b:52:69:c7:03:52:04:bc:8a:57:00:9c:a1:e9:f9:5a:cd:f2:
         45:d5:7c:47:4c:4b:02:06:6f:39:08:de:b6:71:5d:d3:e5:d4:
         a5:71:a7:69:78:3e:a6:74:c1:3b:36:22:e1:e0:c8:87:98:9c:
         24:a5:c5:8a:2a:e6:93:e2:53:4c:dc:b1:65:9c:58:19:19:da:
         f7:a0:02:c4:0a:5d:46:06:75:86:0f:0c:d2:34:af:42:f6:97:
         fc:8f:78:65:e6:99:40:43:99:77:59:44:17:a8:3d:ba:c3:bb:
         4b:62:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:37:39 2025 by rpki-client