Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503121cd-c60b-30da-a1c2-8c9a66b511fb.roa
File:                     503121cd-c60b-30da-a1c2-8c9a66b511fb.roa (raw, json)
Hash identifier:          HuhYZlnflDEHOAYYyGhfUD6hq/yPz9VZhFETef/VuVc=
Subject key identifier:   6C:87:A0:08:94:E2:96:4A:41:F5:69:A2:F1:34:74:C2:CF:E6:56:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AFADC089DB51DAE59600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503121cd-c60b-30da-a1c2-8c9a66b511fb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b320::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:af:ad:c0:89:db:51:da:e5:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f8f24b00-73a3-40b8-accf-29c0fa0ce7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:8b:95:15:f5:3d:36:0d:f8:9a:33:1c:b6:
                    b7:1b:4e:2c:66:75:19:93:ad:08:e0:2a:cc:43:45:
                    68:30:31:e7:48:e3:3d:f0:b6:51:dc:38:31:c6:59:
                    06:30:ee:ef:4b:45:5a:c6:f5:f3:b8:dd:bc:0f:89:
                    e9:41:42:42:79:6b:31:5f:fa:f6:67:50:21:c8:c0:
                    20:99:8c:66:5c:3a:ff:43:f5:ac:8f:01:35:33:58:
                    8e:86:ba:b3:f9:f4:e5:13:1d:7c:16:da:ca:d5:7c:
                    f9:5f:30:9e:53:59:59:7b:b5:13:35:89:06:b7:89:
                    36:60:50:9c:79:3b:13:ed:6f:2e:a9:0f:b0:60:ea:
                    e4:dd:e7:22:73:53:40:84:6a:54:ad:84:f8:9a:02:
                    8a:f6:14:26:88:06:82:5f:8a:a3:af:cf:e9:2e:7e:
                    bd:f2:fe:7d:dc:f1:c9:2b:c9:3c:20:b0:05:f2:b0:
                    d1:61:26:8d:ec:de:30:d0:cf:f2:c3:5e:bf:96:0a:
                    fe:6e:3e:7a:32:bd:bb:af:df:ef:0f:e1:0c:76:a1:
                    b0:a0:55:ea:a2:b9:02:6d:c4:41:09:b5:20:7b:0e:
                    ec:e3:69:c6:cd:6b:86:f7:46:dc:4c:8a:f6:8c:d4:
                    29:7c:d2:62:ae:b9:c5:2d:cc:b3:40:a0:4c:9b:0f:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:A0:08:94:E2:96:4A:41:F5:69:A2:F1:34:74:C2:CF:E6:56:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503121cd-c60b-30da-a1c2-8c9a66b511fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b320::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:ad:02:2e:57:84:ef:22:af:c5:fd:83:32:08:13:bf:8e:
         ed:f4:fc:48:26:f0:19:f3:d8:cf:f5:6f:bf:ee:5c:fe:7e:81:
         13:8e:80:2c:24:bd:38:a2:50:0a:4c:6c:02:aa:a4:1b:3b:b6:
         81:31:d3:a5:9d:60:8c:76:4b:3c:c1:da:27:24:0e:8b:4f:36:
         3a:da:a3:57:b9:84:d2:20:a6:d9:fb:01:dc:c0:df:95:2f:00:
         0f:a8:0c:45:cd:5b:f2:21:a8:96:17:82:44:f4:12:ec:ec:e0:
         1f:dd:93:d4:f9:05:f0:e7:14:02:c1:8e:e9:90:3e:f1:66:fe:
         c7:13:40:cd:03:9d:72:93:df:f3:85:17:ef:69:71:1f:c3:9e:
         e0:12:43:f7:8e:17:ea:6a:1e:d8:86:02:78:ad:35:99:95:81:
         66:82:f9:af:d2:f7:cf:8f:fb:16:6f:c7:60:20:bf:c1:2a:89:
         22:c2:1e:4c:1d:20:c4:e8:7a:2b:55:65:b3:cf:19:27:98:0e:
         a5:3f:e5:b3:84:13:7b:0f:41:17:de:62:f6:32:14:3e:25:ea:
         a3:eb:a3:3b:0d:a9:2d:9e:a0:4e:7a:e7:c4:2f:48:71:f8:1a:
         d6:79:ed:b8:4c:71:82:2d:e5:3a:13:44:76:8b:8f:1c:a0:07:
         75:ad:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:01:22 2025 by rpki-client