Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
File:                     5c1adf31-9969-3673-b38e-984ece6b6e85.roa (raw, json)
Hash identifier:          WMAAAzJgoP08C+8WEWadaO8OC46iEZNAoxNy5D0hP2E=
Subject key identifier:   77:1C:2B:7D:99:DF:D0:FC:C3:5B:0B:BF:4D:4F:70:77:AF:1C:58:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290ACF6BCE67D9DC1B9BC5A
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ac:f6:bc:e6:7d:9d:c1:b9:bc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=864c385d-7b4b-400a-87d4-3956b7a9834e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:8b:8b:7d:d9:13:67:81:70:69:26:0a:4d:
                    a6:65:88:79:25:dc:c2:ed:b3:35:77:2d:80:70:88:
                    6c:0e:6a:be:e9:1e:ba:aa:a9:9f:da:40:38:84:1b:
                    e1:43:89:7f:3a:bf:ff:5d:38:0f:d7:7a:ed:88:b0:
                    f8:ef:26:1f:7a:d5:e2:da:cf:82:2a:71:ef:60:2c:
                    e4:09:c1:b7:b7:5b:89:dd:77:cf:11:8f:bb:fa:e0:
                    cc:3d:f7:f9:2b:dd:42:72:dc:2a:00:53:39:ce:e9:
                    85:91:ec:86:30:75:bc:1d:2c:66:60:ee:83:c6:30:
                    7e:e5:ac:22:ff:49:f1:16:78:7e:43:4a:dc:44:78:
                    11:ef:f6:8f:d1:a9:4b:e6:92:53:10:36:4a:78:cb:
                    ac:74:f1:bd:d6:68:81:af:76:dc:f8:36:d0:14:ec:
                    e2:53:b6:a1:c8:86:66:d3:24:60:88:b0:80:5b:5a:
                    a3:0c:99:a8:2f:ec:56:ac:2c:e8:92:12:ad:35:29:
                    09:07:be:f6:40:36:10:16:ed:04:a6:a6:64:0d:70:
                    c9:58:57:eb:1c:5a:d7:c6:44:d4:f0:36:d3:d9:22:
                    54:50:93:72:d0:bb:21:bf:e7:31:61:ef:43:b0:b8:
                    8c:de:be:60:54:c0:17:22:8c:88:51:b8:b5:45:2b:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1C:2B:7D:99:DF:D0:FC:C3:5B:0B:BF:4D:4F:70:77:AF:1C:58:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:63:b5:4c:db:05:4f:09:1b:65:73:b9:a3:59:dd:74:2a:5e:
         8f:0f:4b:bd:61:da:26:28:82:c0:9d:5e:ea:3e:e6:36:52:ae:
         69:71:ad:83:b7:c3:3d:b2:f2:8c:09:4a:f8:1b:96:1d:9d:c9:
         2e:00:eb:bb:46:c9:7c:e3:d8:45:e8:81:fa:a5:1e:e3:ba:67:
         eb:09:90:60:ba:cc:bb:a5:1a:97:1e:d8:47:bc:5d:fd:b5:98:
         86:5a:00:e8:08:59:3a:8b:ce:48:2d:a0:ca:da:2d:63:b3:10:
         4f:c5:75:d6:77:85:ec:4b:81:5b:43:d9:d3:9e:37:2e:7c:39:
         7e:b1:29:06:ee:d1:7e:f8:8a:05:ea:d6:8a:4d:20:b9:9f:24:
         b1:93:e6:7e:76:7f:0b:49:ad:72:6a:fe:83:21:41:8a:d0:0d:
         31:a3:10:02:43:4c:eb:d1:cb:de:9e:8c:fd:73:24:b0:25:cb:
         5a:af:3c:67:ae:12:af:94:9f:0d:4d:3e:72:19:c2:cc:1f:8d:
         06:72:84:92:78:9c:68:37:58:b1:e0:52:c1:01:28:58:b1:35:
         0b:37:93:fa:49:4f:1e:53:5d:e0:67:3d:7f:68:e7:76:96:46:
         39:f0:3b:2f:98:30:a5:3c:32:ee:72:ca:85:9a:71:e6:7c:9b:
         24:3d:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:10:58 2025 by rpki-client