Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa
File:                     408adc0c-3d88-3656-adc9-c98625dc7ae9.roa (raw, json)
Hash identifier:          WV20XlE5bCViifx9UxuZ/fCAQJ3/Pxe1XbtHwCImsGw=
Subject key identifier:   84:62:7A:FA:CF:B0:01:49:F8:DA:25:56:89:53:6B:5E:48:84:66:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C4FCEBDA81110C2CF080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100c:f200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c4:fc:eb:da:81:11:0c:2c:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=cb0cfa91-6f00-4d9a-9e3c-b353da282e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:fc:ef:5c:91:9a:b0:eb:d8:43:52:dc:77:
                    0e:21:b3:b9:b3:a4:7b:ae:83:10:d4:1c:d3:db:f6:
                    70:c2:88:09:e7:b1:53:b2:d3:de:8e:bc:c9:1d:7d:
                    7f:17:54:23:a5:8e:26:e5:a4:39:c3:3b:bf:72:90:
                    8c:ae:4f:b3:de:ea:5d:23:1f:4b:f7:fe:33:53:75:
                    c4:13:29:cc:bb:8b:77:1a:40:b8:4b:c1:cb:bd:f4:
                    22:4e:66:65:73:90:3f:9d:41:a6:2a:9f:ac:49:c8:
                    cf:4e:87:02:6b:a0:f2:f9:9a:7d:75:29:da:d1:62:
                    37:b9:b5:58:72:94:38:26:97:7a:eb:47:90:8e:47:
                    c8:de:2c:e7:09:d4:52:f6:bb:b3:50:f0:25:d4:27:
                    23:6b:78:69:d8:dd:88:ab:7c:b7:1f:98:ce:b6:12:
                    7f:18:b3:9c:dd:62:11:2d:6a:db:78:a0:9e:2a:ff:
                    6a:09:5e:0a:4f:3d:79:f1:f1:54:33:fd:31:5c:c9:
                    de:81:6b:04:48:3a:75:96:ae:02:a6:78:54:54:48:
                    f9:7c:f9:9f:79:f1:21:84:f4:7d:0a:ec:04:af:0c:
                    b1:bf:9e:d8:ea:e9:b3:08:04:02:3d:c6:6f:1d:82:
                    2a:a9:b4:14:88:92:71:45:9d:64:f8:4c:18:10:67:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:7A:FA:CF:B0:01:49:F8:DA:25:56:89:53:6B:5E:48:84:66:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:f200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:cc:60:4f:bc:03:d1:4b:f3:bc:09:fd:5b:50:9f:71:e9:
         66:cc:82:b9:e1:96:78:96:d1:30:54:f5:73:55:5f:90:a4:e9:
         64:d1:c9:43:c8:06:76:be:4a:af:53:60:c0:71:29:4e:3c:9b:
         49:35:3f:96:1b:4e:05:00:96:bc:9d:52:ed:16:cf:8b:0b:5d:
         a4:dc:32:d3:b4:7c:52:02:32:28:84:79:35:f5:81:6c:71:ff:
         61:3e:37:23:36:d1:66:22:54:f4:0d:a6:84:13:16:ac:1b:51:
         af:a1:17:74:cd:94:de:fe:05:8c:60:ed:e8:b5:3f:d6:43:07:
         74:c1:7f:b5:46:a4:e9:87:7d:c3:63:56:c6:92:56:93:c8:58:
         a2:d6:f7:a5:fa:bf:b6:ae:d1:41:7c:34:a1:04:5d:6f:88:cd:
         3e:34:0d:9f:c4:c8:36:08:7b:89:3f:c1:f7:81:2c:70:e5:9e:
         ee:46:9e:74:9c:f3:56:7f:4e:d5:67:c2:b6:f9:3d:80:aa:5a:
         40:45:28:75:87:db:69:0d:76:7d:a3:c9:38:a1:66:09:5b:7f:
         2c:78:99:36:20:a4:7d:af:a4:fb:f6:38:8e:9c:bc:c8:5d:78:
         6d:1e:f6:fa:11:6c:98:4f:6f:c6:59:40:17:f5:29:91:34:22:
         72:75:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:36:53 2025 by rpki-client