Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/540c489e-38e8-3898-854d-76de754bc661.roa
File:                     540c489e-38e8-3898-854d-76de754bc661.roa (raw, json)
Hash identifier:          V6nWUNASIugQ8nmb4kxGMhksLg5t9lVj3qtEaEiOKSs=
Subject key identifier:   5F:B4:5C:D9:F4:73:77:86:F1:D6:CE:42:5B:5D:E7:B7:16:08:92:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295577C21FB30459A2101C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/540c489e-38e8-3898-854d-76de754bc661.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:a100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:77:c2:1f:b3:04:59:a2:10:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=187ee89f-6049-4bb5-b036-bf84c38054b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:83:93:37:6e:eb:de:ab:26:e9:f3:1f:57:
                    11:e5:d3:88:04:36:97:76:e4:34:a1:70:0f:c4:ad:
                    42:f8:b6:5c:39:7b:5e:56:8f:22:6f:3b:07:eb:48:
                    ce:c1:b5:36:e8:0e:44:eb:07:36:37:b1:9c:96:2d:
                    8c:87:69:f2:df:b8:ca:88:8c:52:3f:48:bb:8f:02:
                    97:ab:c7:8d:4b:b4:19:41:f4:c2:94:3a:64:50:3a:
                    da:da:45:f2:7b:f5:f1:da:86:82:39:e0:e4:5b:85:
                    e4:ab:11:41:d7:3f:cf:65:cf:67:41:90:82:d0:79:
                    fc:93:ef:d2:76:e3:37:b6:f9:8b:2e:19:b3:ac:d7:
                    0b:c9:d2:e3:5a:44:f9:8c:a3:3b:e7:43:89:5f:78:
                    5c:0f:5e:d0:f5:57:fc:ef:75:68:74:36:b0:4e:ca:
                    af:e9:36:53:2e:62:d2:54:29:fb:ca:6d:0b:72:5c:
                    a1:57:54:24:f1:1f:61:ad:a5:68:af:02:0e:00:fc:
                    df:ba:dc:67:43:92:44:4e:2f:bf:ce:55:ad:fe:8a:
                    6b:27:62:f6:19:bc:5b:83:6b:17:2c:71:67:e8:9b:
                    82:ad:ae:57:31:cb:34:d4:78:61:37:6c:95:89:6d:
                    d9:12:05:7f:db:c7:dd:91:cf:31:bf:5b:01:f5:7f:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:5C:D9:F4:73:77:86:F1:D6:CE:42:5B:5D:E7:B7:16:08:92:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/540c489e-38e8-3898-854d-76de754bc661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:af:b2:89:7a:8e:45:17:a6:2d:05:f1:0b:64:90:dd:7c:
         8e:9f:90:e4:aa:ad:f0:70:09:6f:7e:6c:c7:c5:d2:0b:2c:b0:
         28:ed:10:cc:3f:b7:1c:c7:c0:ce:5d:64:90:d5:7e:d4:b8:6d:
         ce:b9:27:81:51:08:57:2f:d6:83:fa:1b:5c:0d:c4:39:5c:40:
         48:fc:fe:bd:67:d9:0c:b1:bb:f1:34:e2:d2:2e:f9:e5:46:48:
         2e:fd:e1:29:7f:aa:c8:ca:7e:c5:cb:ee:ae:33:ba:dd:f8:33:
         11:5c:40:a8:74:c0:08:cf:cf:9c:f1:a3:34:ba:7b:c2:72:d8:
         0c:f3:0e:f3:20:41:3c:6c:c7:e3:d0:7b:f3:4e:e0:16:1a:85:
         2f:28:2f:8b:5f:e6:58:e5:40:8c:14:d4:c4:6c:8a:a6:93:7d:
         de:f7:e3:a7:6e:d6:2f:9f:9d:0d:64:ff:65:a6:d6:3c:0d:90:
         43:bf:ba:a7:3d:55:72:3d:7e:90:ce:bc:eb:fb:e1:e3:41:b4:
         c8:1b:19:a4:76:16:4b:ff:75:5c:a9:cf:ca:ec:df:59:9a:a1:
         a0:a2:98:f1:25:16:bb:2c:36:28:f6:ea:11:86:72:21:e1:59:
         5b:2e:6c:68:e2:21:55:08:0f:c2:f9:05:d0:59:4f:3e:cd:63:
         68:fe:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:47:20 2025 by rpki-client