Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa
File:                     74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa (raw, json)
Hash identifier:          olFOl4mTQXG1uymoUJPYOQ8FuYbG0nEOKfg7FBtQnrk=
Subject key identifier:   82:7D:E7:74:07:AF:CB:B6:C4:96:0B:42:CE:0E:3E:24:63:AB:0F:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B22DFAD89A909D34A780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100f:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b2:2d:fa:d8:9a:90:9d:34:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5820e31f-a7bf-44cc-81aa-100b81631061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:75:98:8e:69:64:a5:57:7c:66:b0:01:d9:
                    00:6d:10:a0:85:8e:c4:4c:e9:86:ee:00:3a:de:4e:
                    3c:45:15:2f:b4:85:19:29:2a:3b:3d:6e:3e:06:04:
                    e2:21:b4:53:bf:f3:a0:f7:27:88:f2:29:00:ab:bb:
                    99:93:c2:c8:d1:b6:a4:93:ee:ca:3b:a9:56:80:01:
                    fb:27:b0:04:75:e8:c4:12:48:3a:89:ed:eb:aa:58:
                    e7:af:fb:45:d1:fc:e5:e9:20:54:11:30:4a:8e:0f:
                    10:ac:ab:54:4e:2a:c4:bc:05:bb:7b:97:82:47:55:
                    90:79:e8:07:3d:6b:c1:fe:0e:84:ba:73:a1:e1:16:
                    51:fd:e7:f6:83:aa:fe:22:75:2e:7a:f5:85:83:e9:
                    f8:ea:13:34:19:ca:5e:b0:cf:39:38:0b:04:69:81:
                    e9:8f:5c:65:d0:14:20:63:33:8a:48:cd:29:7c:ce:
                    6c:86:5b:9c:5a:37:7a:82:f1:e3:17:8d:80:cb:12:
                    56:c3:ff:c1:ee:dd:0d:ee:5e:63:4a:1a:0b:58:5d:
                    1d:cc:40:e6:8e:16:af:89:16:2a:d7:a5:c9:68:fb:
                    08:35:6f:04:69:dd:21:8a:cb:b9:3a:5a:5b:5b:0e:
                    2d:d9:a2:25:1a:b0:df:8c:b8:d7:7e:61:d6:60:3d:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:E7:74:07:AF:CB:B6:C4:96:0B:42:CE:0E:3E:24:63:AB:0F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74cea3b3-9e78-3a68-9ea2-d81c0a5d1378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:50:2a:5f:10:6b:43:fb:2e:88:68:2a:59:08:7c:25:2b:
         6c:51:72:99:8c:7c:5e:de:a1:ac:0f:5d:ce:81:ee:32:84:23:
         41:05:53:4a:b9:66:5f:82:63:9c:05:40:34:e3:9d:9e:79:6f:
         99:2e:e3:8e:59:24:d8:5e:ab:9a:e8:d8:ab:20:85:d6:15:24:
         0e:32:9a:98:5d:83:14:9b:48:56:12:ca:ba:64:86:65:63:d6:
         b6:b3:7d:12:3a:b4:80:d2:84:08:8e:eb:ef:4b:ba:c8:05:5a:
         44:22:91:9c:1a:ac:81:44:12:80:9e:e7:09:5b:dc:fd:e9:f6:
         3d:95:8a:a7:1e:10:1f:e7:46:93:7e:08:65:96:93:84:f7:94:
         2a:82:b6:17:cd:42:5e:a0:86:3b:04:30:b7:8b:94:59:0d:4f:
         dd:88:fc:44:a2:ed:70:ca:e2:15:7f:be:33:c0:66:8e:4f:60:
         db:9e:46:8c:3a:a0:12:66:83:2b:6b:90:b3:59:39:49:b0:4a:
         20:46:f5:96:23:94:48:85:61:93:c4:4b:df:67:7c:12:7c:cc:
         a0:54:d5:51:07:93:04:d3:8d:35:8d:b6:51:19:97:f2:09:bc:
         8e:26:d5:e1:fc:85:3c:ff:dd:c8:1e:51:e6:37:39:e9:c8:8d:
         3b:8d:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:21 2025 by rpki-client