Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d34cc75-b3d6-349b-82f1-cb81b216954a.roa
File:                     3d34cc75-b3d6-349b-82f1-cb81b216954a.roa (raw, json)
Hash identifier:          xJiuSAlhvrm86Agk8KA02np8c6rPwJMt3u2ilDBMkBs=
Subject key identifier:   8F:F6:EA:BF:53:4D:B3:E8:EE:DA:95:D3:C1:DE:67:2C:AC:05:4D:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15ECC3C21C6C349DBD9E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d34cc75-b3d6-349b-82f1-cb81b216954a.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:100e:a038::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ec:c3:c2:1c:6c:34:9d:bd:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=1844e80f-6bba-4396-8f40-b3224b80b32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:37:67:35:a6:48:c5:66:b9:f3:b0:b4:cd:
                    07:80:ab:ff:79:22:01:31:61:16:03:fd:14:84:be:
                    6a:f5:37:6a:a1:20:4d:f3:cc:f3:73:e4:0c:19:a8:
                    12:a4:19:fc:da:ff:16:31:69:a2:e4:93:f7:04:b7:
                    91:b2:94:39:13:de:b3:69:6b:19:fa:41:f0:4b:af:
                    2c:52:d1:cb:2e:6b:76:f9:e6:f8:dc:ae:1c:42:12:
                    a8:a7:01:cb:11:30:79:66:a7:cc:1e:8a:99:99:4e:
                    b0:e6:12:b1:05:78:bf:41:0e:9c:40:fd:f1:76:b3:
                    2d:5d:24:72:93:12:c5:40:be:96:c2:9d:c0:65:5a:
                    60:26:ba:99:83:0c:b2:10:9e:fc:76:0a:49:ba:c2:
                    00:bf:c3:d8:93:af:f7:67:f4:a6:cc:b1:5e:21:55:
                    be:e8:b1:94:fd:67:33:56:61:34:a3:cd:3c:ad:df:
                    c9:d8:c4:8a:d0:ea:a5:2a:09:08:5f:5f:80:63:98:
                    64:17:de:d3:07:1e:38:bb:d5:ec:7d:0b:c0:35:58:
                    e6:1e:52:26:3d:96:b3:fa:33:79:1f:9e:fc:af:34:
                    ca:4b:50:3c:1c:16:9a:76:42:e6:20:95:22:a1:f3:
                    f3:af:31:50:7d:08:3c:9e:41:02:71:aa:92:cb:65:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:EA:BF:53:4D:B3:E8:EE:DA:95:D3:C1:DE:67:2C:AC:05:4D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d34cc75-b3d6-349b-82f1-cb81b216954a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a038::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:79:35:72:b0:a3:33:4e:3a:f1:a4:9a:25:6a:b0:e8:dd:
         41:50:5d:cb:d6:09:3f:14:24:2b:73:a2:ff:32:77:ef:66:09:
         a8:33:64:58:1d:55:42:e0:4f:0f:d1:dc:06:4f:84:cd:f3:5e:
         26:af:91:aa:d9:90:38:6a:be:ad:a3:5b:21:a8:8a:ba:3f:2f:
         0c:de:68:34:63:87:32:db:df:07:91:b0:93:cd:62:fb:53:55:
         40:bc:47:0a:ab:4d:fd:64:a3:6b:32:b4:77:36:a3:46:ff:6c:
         4c:b0:63:b0:de:23:e3:42:cf:5a:05:4a:9d:5e:16:06:c7:0b:
         c9:5c:19:3d:0d:95:94:1b:37:b6:1c:db:d9:9b:a6:b3:c5:c4:
         91:c2:7c:80:d9:d3:07:d6:1b:45:b8:77:85:b6:a4:c3:a2:ad:
         0e:75:29:1e:15:41:2a:b4:b4:b9:cf:c7:db:bc:44:19:f3:1a:
         72:2e:92:db:19:1e:8c:98:6b:ea:ae:d3:9a:43:62:84:dc:3e:
         f2:fc:86:59:5a:90:c0:f1:de:90:52:67:bf:e8:f7:1a:2e:7c:
         9d:5b:ee:20:70:0f:99:5b:ef:94:10:c1:0a:ba:02:1d:03:77:
         8c:05:78:3c:c4:ed:f0:07:73:43:66:d7:db:49:d1:8b:5a:4d:
         3e:e7:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:37 2025 by rpki-client