Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa
File:                     22192fa3-aa90-32a5-953c-f2263e98616a.roa (raw, json)
Hash identifier:          YRID7g4SbzkYcvnujkwJrl33xlMTxJF25yoOSciE5xo=
Subject key identifier:   7D:27:90:C3:B8:47:C2:44:0C:E6:65:62:56:7D:91:62:BF:D8:88:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B1DB88D415A6AF039CF4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100f:b080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b1:db:88:d4:15:a6:af:03:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=26016520-466e-4c63-b1aa-b4c0a59b6cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:1b:1a:fd:24:55:25:a0:4c:66:32:d3:db:
                    0e:eb:40:fe:d2:12:de:bb:06:9f:0e:d3:13:ac:c9:
                    37:91:30:ed:04:39:c1:d7:dc:ea:80:c5:54:58:84:
                    c9:b8:fa:69:1f:ba:ee:f0:c7:4f:50:2b:98:3b:4c:
                    a4:65:5a:a8:9c:bd:d4:e4:91:8d:75:92:62:64:55:
                    36:2a:1b:d6:ee:ef:93:5e:36:4d:81:8e:c9:fd:29:
                    43:47:92:a1:2d:95:75:9f:d1:13:d0:6f:2a:cc:0f:
                    a1:71:c3:5d:7a:86:aa:dd:ea:68:4f:de:ac:4e:0a:
                    dc:5e:22:b9:33:49:c9:29:21:e8:97:35:28:fc:05:
                    c4:6c:99:be:18:9f:d8:fd:ba:3d:bb:31:fa:62:7c:
                    e6:7e:01:84:21:64:1d:9c:06:fe:c0:0b:30:c3:b1:
                    9b:8a:57:95:95:2d:4d:de:45:42:7d:37:02:b1:ce:
                    fe:cd:ca:67:8e:1d:bb:42:d4:29:0c:24:f9:77:b0:
                    02:2f:82:09:4a:94:70:3c:96:65:cb:9c:7c:0b:17:
                    07:8c:e4:cf:05:12:c6:b6:aa:fb:ce:5b:25:dd:71:
                    b9:d3:c1:96:6a:8a:0e:8a:7c:6b:c3:db:67:39:83:
                    c2:38:e7:6e:f4:18:d0:4d:16:5c:9b:5a:db:c1:c0:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:27:90:C3:B8:47:C2:44:0C:E6:65:62:56:7D:91:62:BF:D8:88:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:f9:52:ea:cd:20:ca:32:15:e6:c2:a0:92:3e:18:be:4a:
         b7:28:88:0f:4e:77:c2:5c:54:c8:ff:cb:87:c7:f7:ea:bc:78:
         99:18:69:81:7c:c7:69:9a:2d:7c:67:40:ad:19:21:37:3c:79:
         b1:7c:0b:44:d9:33:db:6c:0b:41:6a:55:5c:25:46:1c:99:ff:
         79:07:53:fd:16:d2:9b:7b:df:59:50:66:ff:fd:c7:d6:f7:b0:
         e6:e7:76:45:50:55:23:2e:bb:b8:0b:5b:32:f9:94:a9:02:14:
         b9:3a:b5:05:03:a4:06:9e:fe:d5:ea:9f:15:d5:0e:8e:c1:cf:
         51:f2:17:20:46:5b:99:09:84:30:1e:eb:71:04:c2:ca:76:23:
         40:f2:42:f7:ec:41:13:32:e9:0d:2b:a4:5b:7e:f9:ce:85:19:
         99:2b:bb:7e:d4:93:86:82:15:ef:53:ed:64:73:1a:39:50:46:
         8e:31:86:cf:5d:bf:54:fc:e8:3a:1b:52:3b:51:66:2b:d3:85:
         ce:36:5a:61:87:80:e5:e9:99:b3:76:e8:57:8e:ad:dc:98:59:
         7b:3c:60:04:e3:8f:a9:56:b1:0b:59:d0:26:95:fe:1e:a1:5c:
         03:a3:40:29:f4:8a:d2:3a:54:04:f4:59:f8:74:e5:54:c6:e9:
         51:f1:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:10:33 2025 by rpki-client