Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa
File:                     d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa (raw, json)
Hash identifier:          wS519pE6WddUWnVxY1EeLtK5rROTxp2iSdgoS/tXojQ=
Subject key identifier:   4D:71:C3:6A:0D:94:B5:51:12:59:72:C6:80:00:32:82:55:FF:39:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C667913EC55A36EA9200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c6:67:91:3e:c5:5a:36:ea:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f7cafb41-84ae-4713-9e69-43138f885f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:a6:c4:ee:80:72:1f:f8:74:0f:97:32:df:
                    a6:32:b0:0f:a6:2d:e0:43:92:c3:f2:d2:b3:2b:fc:
                    48:56:d3:e4:9f:8f:2f:34:65:b0:70:b6:eb:cc:fc:
                    7a:3f:39:be:e8:1a:98:6a:cf:32:2b:70:cd:2b:90:
                    0a:77:a5:b5:86:63:d7:15:3c:03:15:ff:4f:2b:84:
                    7c:3f:e1:8c:54:6d:74:ff:d8:66:5c:20:94:f4:3b:
                    79:63:5e:55:5f:14:f5:a2:ab:8c:e7:61:01:d1:c1:
                    ae:d4:c0:b3:34:35:e9:a6:95:45:32:af:c7:fe:45:
                    1f:7a:ed:5d:58:13:1a:1d:57:c1:cf:df:99:b1:ac:
                    7f:25:0b:65:c7:c6:27:1f:49:b5:13:e5:76:da:fb:
                    6a:38:75:f0:42:0c:7f:94:2d:d6:83:21:30:5a:1e:
                    23:c0:4c:7d:34:59:49:11:82:d9:d2:05:6b:e0:c1:
                    fd:15:b7:61:d1:8f:a1:a1:d4:14:4b:df:fe:91:03:
                    f4:cb:ed:17:11:f1:21:7c:9f:f5:d3:b0:bb:ef:44:
                    91:de:d6:c3:af:ba:b2:82:ae:c3:ea:3a:5d:c0:99:
                    31:1d:78:94:89:6e:fa:e5:ac:3b:94:81:76:21:a3:
                    94:74:3b:99:5e:72:30:93:bd:77:db:9d:e9:a3:33:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:71:C3:6A:0D:94:B5:51:12:59:72:C6:80:00:32:82:55:FF:39:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:63:95:1e:44:80:01:f6:7a:f7:ec:58:fc:e0:a7:37:36:4b:
         41:88:f2:0a:0f:f9:fe:a0:fe:b0:d6:65:90:1c:12:f7:84:4f:
         e2:90:45:ca:f0:e1:9e:5e:9b:e1:94:aa:14:c9:ce:cf:33:86:
         1f:e8:a5:5b:48:17:f8:17:4a:ce:5b:04:4c:83:70:18:ee:6c:
         d6:62:99:bb:4c:fe:b6:e7:c9:0b:4e:c0:7b:9c:47:fa:e2:be:
         7a:33:08:01:75:fc:1c:95:ff:7d:aa:46:13:8d:1c:3d:b4:6f:
         88:f0:8b:11:e4:bf:49:60:1e:86:55:86:45:30:c0:e3:e4:94:
         1c:51:63:0a:26:bc:6b:31:28:27:39:14:0e:97:96:ec:ae:d8:
         0c:9c:af:d3:ae:1e:5c:c7:25:91:3d:ff:a8:83:af:8a:5d:ff:
         74:c3:12:ef:fd:48:48:71:0d:a1:c0:e2:dd:cf:88:52:d2:72:
         d1:00:c5:ee:58:7c:a1:02:95:9c:2a:aa:d6:52:eb:36:7c:4a:
         ac:64:fb:2a:a4:fb:66:ae:d1:3a:23:aa:df:83:69:ac:cb:16:
         c1:d2:78:e3:a2:40:42:bb:8a:85:d2:7f:68:0d:6d:b0:df:02:
         ad:03:b6:80:9c:7b:0d:22:56:a9:e5:56:c5:c7:58:88:67:ac:
         8b:5e:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:47:41 2025 by rpki-client