Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa
File:                     7267ca22-e4dd-34d1-881e-b10f748865ea.roa (raw, json)
Hash identifier:          ES6jH7AsVoFsukw8n8yEQD+BALii2JZ8AxouGMG/uy0=
Subject key identifier:   9A:11:1B:D5:A5:4F:1F:A0:12:76:AA:26:D1:B2:CE:31:34:F8:75:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF2550222B1C75474B800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:8016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f2:55:02:22:b1:c7:54:74:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6bc356f7-3db4-4e01-a4f8-a6cfa23edc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:f8:1c:1b:5c:53:21:7e:12:25:af:a5:5d:
                    d9:9f:b7:2f:0a:62:d5:ed:7b:f4:03:4f:38:80:59:
                    aa:e6:12:7c:bd:1e:34:41:f7:40:9a:bd:7f:c1:eb:
                    86:26:c2:cd:6e:84:36:bc:ea:cd:b9:3b:ed:33:10:
                    88:7e:80:6a:2f:08:c9:6d:40:25:fa:5b:61:c4:04:
                    4c:08:de:5a:b5:01:4d:ca:06:75:e2:b7:e0:de:9a:
                    4b:bc:9b:e8:d0:1e:1f:5b:76:7a:a2:1d:68:3f:8d:
                    65:7f:60:10:cb:58:09:6f:a9:38:1f:2e:c7:30:ba:
                    62:e1:f6:0e:0f:24:0a:65:da:b5:10:62:6b:5a:4d:
                    7b:48:e0:0c:3b:23:18:db:e2:16:5a:18:42:89:1d:
                    bc:a9:15:d2:5f:7a:56:5b:e8:f3:b6:55:05:c4:60:
                    d6:df:f6:3a:8d:ea:ca:8a:3f:53:1f:e2:a9:17:ea:
                    16:c5:66:2a:ac:b5:26:af:a3:f5:92:bb:23:69:a8:
                    5f:a0:8c:7e:75:de:1c:05:ac:1e:a0:05:bb:40:53:
                    06:32:20:e4:00:a3:a6:59:85:81:33:dc:02:b7:68:
                    96:7d:04:b6:98:ee:a2:26:e4:2a:48:ed:f9:fd:e1:
                    63:e9:f2:31:80:a1:25:78:95:b9:6d:fd:28:c3:85:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:1B:D5:A5:4F:1F:A0:12:76:AA:26:D1:B2:CE:31:34:F8:75:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8016::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:54:1e:f4:82:79:69:73:fd:aa:d6:02:7b:58:6c:97:25:
         e7:85:82:0a:70:88:ca:66:32:78:b0:d5:64:8a:ba:10:19:f0:
         91:8c:ef:38:a9:0a:d9:2e:77:8f:ff:0f:44:84:d0:fd:76:08:
         af:e2:16:13:16:94:b6:f6:1f:f5:6e:04:16:0d:ce:70:f7:3c:
         d0:2f:35:0f:04:ee:02:89:d5:b1:0a:c7:75:eb:88:19:3d:48:
         dd:56:bc:4b:7d:45:b2:25:bc:9e:e6:f8:ec:da:d4:0c:5a:82:
         04:c0:50:f8:b1:64:85:3d:78:34:9f:ae:49:b4:68:c1:9e:45:
         25:fb:88:3a:8c:73:ea:59:ed:1b:99:1a:ab:c0:bf:bc:b0:83:
         70:5b:d1:ab:51:d2:15:49:66:81:9c:d3:f0:73:22:1e:bb:ac:
         10:86:7f:ca:c3:44:f2:bc:e4:8e:f9:93:49:dc:22:93:a6:09:
         6c:a4:b3:c7:ae:25:7f:01:90:25:61:f9:71:bc:36:05:1a:bb:
         65:0f:fc:bb:b5:4b:40:0f:6d:64:12:26:11:8c:23:8b:61:66:
         35:50:29:e8:4e:f8:76:51:e5:e5:d5:f4:85:ad:cd:bb:cc:11:
         59:e5:42:a3:7f:16:9d:3c:e5:2a:9b:f3:1e:aa:d3:75:fb:7c:
         08:56:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:20:30 2025 by rpki-client