Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
File:                     389f5dcb-ae9a-32de-a240-8137aa93a357.roa (raw, json)
Hash identifier:          4qXPv66+Ti6qYg34yH2XRkhlNIq4sHTKRXkj3FILqEU=
Subject key identifier:   A0:4E:1F:98:FD:B2:DB:43:83:E5:93:BA:6A:9F:C7:25:9E:72:D1:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B2F1A297FFDD6BEB87A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100f:b1e8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b2:f1:a2:97:ff:dd:6b:eb:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=4ff3b311-7dac-4b24-8afc-5844bb5675a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:8f:68:22:8b:f5:02:35:a1:ba:e1:8c:f3:
                    d3:69:d3:fa:f6:9b:19:02:24:2c:28:ba:f4:5d:56:
                    1b:e0:b5:5a:48:46:33:e9:67:45:24:d8:fa:11:8f:
                    ca:a6:a7:49:d3:10:37:a2:3c:6a:57:19:1c:30:7f:
                    d1:4d:e5:be:d4:ac:ec:b0:a2:d2:93:42:02:2f:d5:
                    d9:0a:d5:69:b4:04:e0:ff:e0:ec:cb:16:50:84:e2:
                    e2:9f:7e:0d:2d:ef:73:8c:58:74:7c:58:5c:f6:6a:
                    d5:d1:54:37:ed:d2:e8:1e:ba:dd:53:99:fe:8b:02:
                    d2:5d:88:12:c6:2f:e1:db:50:ce:97:44:40:8f:75:
                    2a:64:ee:ab:2e:83:bf:91:fd:b1:a6:4a:a8:11:bb:
                    e0:77:c1:fc:d3:05:f9:4f:2d:9d:ce:d0:8a:da:4c:
                    4e:84:9b:a0:26:c6:9b:35:b6:71:1f:9a:46:1f:77:
                    20:8e:1d:eb:3b:0d:4b:8c:df:44:34:64:ef:37:53:
                    7a:13:b1:ee:e1:a2:5b:c6:7a:e2:5f:e2:12:9d:04:
                    61:ef:72:e0:4b:47:cd:e1:a3:34:00:0e:c8:ad:24:
                    bf:33:6f:75:3b:99:af:e9:58:74:ff:43:37:0d:ff:
                    03:7c:19:62:fa:7a:1c:20:f4:e8:25:50:6e:e2:8d:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:1F:98:FD:B2:DB:43:83:E5:93:BA:6A:9F:C7:25:9E:72:D1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1e8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:25:68:18:e5:d8:fa:3c:5e:2f:e4:37:5d:b9:a1:cf:96:
         a8:11:be:a6:19:7c:15:9c:7e:d6:8e:8c:3b:4a:1b:38:5e:3a:
         f1:c1:aa:06:07:75:d0:15:9a:46:28:3f:30:89:e2:2f:2b:12:
         71:14:77:7a:3d:36:04:26:bf:77:9e:3b:d0:6d:3b:25:ef:26:
         36:9e:16:c1:00:99:34:6e:a0:fb:a4:f6:65:31:1c:a6:d0:60:
         e0:85:51:ed:3c:15:33:a2:21:8d:be:eb:1f:f3:fc:a0:7e:91:
         dc:f1:da:ad:fb:9e:43:60:f7:03:fe:df:1e:d7:1b:8b:8d:9e:
         25:af:0e:b7:97:28:76:43:f6:c3:46:c0:32:e0:9b:e3:3f:f9:
         da:79:55:35:f8:75:d7:c5:5a:a7:b7:03:8f:90:36:40:09:cf:
         d1:05:a3:03:54:49:15:f2:de:ca:02:41:8e:5e:c0:b0:60:cb:
         e9:40:ad:05:63:3a:52:0d:09:cc:87:5f:31:9d:8f:09:55:25:
         c0:88:78:bf:36:e8:7f:d8:9e:f9:04:fa:e2:4f:94:2f:d2:ed:
         cd:67:fd:dc:93:6e:2d:2c:7d:91:3e:a9:60:57:26:ba:90:83:
         47:11:d0:6e:19:11:53:55:2c:1d:fd:c4:f9:59:4f:9e:6a:9c:
         a4:ca:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:10:29 2025 by rpki-client