Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa
File:                     2b402a8c-6485-3df3-92e6-94daadec340d.roa (raw, json)
Hash identifier:          nTThbYE8J3YZRq0Owf3QMjQ1z3oU7UC9fNc2gzKllus=
Subject key identifier:   2A:15:2A:E8:6C:11:A2:99:B4:19:62:C0:65:DC:C1:9D:9D:07:A4:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BE2102C2E2D7424501F8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1009:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:be:21:02:c2:e2:d7:42:45:01:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=9d58f90f-a955-416d-be3f-a5348b6032e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:e5:89:5c:c1:66:cf:56:62:1a:93:6b:6e:
                    61:eb:4d:f0:d5:95:4a:f1:0d:a9:62:64:59:47:95:
                    25:d7:43:8f:16:2b:cf:00:e7:57:8b:9f:2e:48:1e:
                    e3:21:02:36:b5:c6:77:29:00:6c:3c:d0:c0:f0:2c:
                    d0:0c:d1:1d:ce:27:7b:45:f1:61:38:cf:d0:a4:f2:
                    30:60:7a:07:33:29:92:e8:e1:ca:ba:97:32:ac:ec:
                    c4:42:8b:64:4e:85:35:02:ba:83:e2:ae:5f:4b:6c:
                    d9:4c:09:fc:14:7b:f8:7c:a4:47:2d:35:7c:0f:43:
                    d3:39:63:84:e1:d5:a9:02:78:85:ed:05:80:2c:45:
                    f3:7f:70:e8:6e:03:97:90:36:64:c2:c4:44:22:bb:
                    78:fa:20:20:f4:1c:c1:5b:cd:bd:e9:51:f9:4a:ac:
                    21:d1:9e:66:8c:00:30:87:66:2f:17:fb:7c:89:cd:
                    af:21:28:c6:23:48:f3:08:32:27:e7:ab:5c:9e:b0:
                    0f:61:4e:9a:76:3a:ae:2f:a7:64:68:06:b3:1a:ce:
                    a0:59:de:0d:ed:09:63:34:30:80:91:44:b1:99:df:
                    b5:af:e9:a6:50:19:c1:fb:d8:ae:b4:04:e3:f6:e7:
                    2b:80:f7:a1:7c:9a:8f:32:d0:00:a9:07:c3:ea:cf:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:2A:E8:6C:11:A2:99:B4:19:62:C0:65:DC:C1:9D:9D:07:A4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:56:56:76:32:57:00:8b:1b:5b:ac:0c:1b:f3:cc:64:a2:56:
         a9:fc:3e:bf:38:5c:68:59:a4:24:f2:92:7c:39:10:65:f8:88:
         dc:04:71:97:b4:b6:04:b4:82:a6:e1:82:00:cb:14:cb:59:3d:
         ef:4f:24:3b:a1:88:a4:17:f0:36:71:ad:5c:f1:af:bc:a8:d3:
         2b:26:0e:0d:09:57:32:77:04:a5:f5:ce:bd:a2:71:56:d7:f8:
         cd:56:5e:75:b1:7e:aa:9f:30:a9:35:c0:df:2f:15:9b:e7:c6:
         0c:f0:fa:68:21:28:4c:1e:b0:67:4a:75:bf:7e:0b:ac:56:ca:
         97:f9:44:67:3c:d3:21:5d:e0:8e:df:0e:78:17:9c:1b:60:b8:
         3b:77:d7:8f:b9:74:f2:6f:bb:72:90:e4:d2:98:75:92:d9:eb:
         11:52:a1:48:85:2f:84:05:da:1a:a2:11:1b:7e:5f:7e:1c:0c:
         e0:5e:91:30:3f:45:b4:d6:a6:8a:f8:41:1a:b0:f8:ee:d7:c8:
         0d:b1:ef:7a:d9:26:de:fe:74:f6:02:0c:9b:1e:fe:51:87:9a:
         cd:a4:82:1d:40:d5:a9:92:77:ab:0e:87:32:62:e6:2d:a6:c6:
         ae:03:c7:7d:8f:cb:a4:ef:bc:a0:32:ad:95:ff:57:f7:4f:9a:
         fb:84:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:30:39 2025 by rpki-client