Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c07257e-4a90-3416-babf-5422b18cffb3.roa
File:                     7c07257e-4a90-3416-babf-5422b18cffb3.roa (raw, json)
Hash identifier:          gyQM5wVkopfBSvjRQczmxIlOGluvhu2lZ5jixvUwo9Q=
Subject key identifier:   21:D8:E7:EF:C0:D0:A9:BD:CF:9A:CB:F2:8A:32:9C:1B:67:FE:0F:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAEC794904FC8E40586939B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c07257e-4a90-3416-babf-5422b18cffb3.roa
Signing time:             Tue 29 Jul 2025 20:13:33 +0000
ROA not before:           Tue 29 Jul 2025 20:13:33 +0000
ROA not after:            Mon 27 Oct 2025 20:13:33 +0000
asID:                     6167
IP address blocks:        2600:1009:d040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:c7:94:90:4f:c8:e4:05:86:93:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 20:13:33 2025 GMT
            Not After : Oct 27 20:13:33 2025 GMT
        Subject: CN=7c3a26af-029c-4c12-8758-cb5049f4a4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:88:d1:a6:4f:ee:a3:66:94:85:c9:d1:77:
                    36:9b:98:4c:24:60:b5:63:48:b8:ec:63:de:a4:09:
                    01:30:e8:36:d1:40:e9:9e:c6:0a:58:74:a9:dc:23:
                    58:f0:ec:03:3b:9b:df:b3:0e:83:04:29:ce:9d:56:
                    97:f2:20:5f:c4:38:2e:63:e2:27:2a:0b:22:d0:26:
                    5d:bf:89:ef:63:6b:7c:40:ce:8f:a2:0d:55:17:41:
                    bd:a1:98:bc:b8:55:0a:46:3d:89:fb:9e:38:e6:22:
                    51:2a:9e:64:12:17:f5:f4:40:e2:7b:aa:26:c3:78:
                    0f:1d:60:7c:89:32:4e:58:c2:09:68:fd:80:ce:1c:
                    5d:ab:2f:14:32:4f:ed:f8:74:67:10:e7:82:26:1b:
                    2a:3b:01:26:2a:6b:67:e9:a3:07:d7:af:64:06:af:
                    bc:ee:3c:2b:41:fe:d2:b3:59:61:e1:47:f7:f7:1f:
                    3e:43:9d:a6:91:d5:78:ac:74:52:ea:40:b3:52:a4:
                    e2:d6:50:e7:d2:24:86:1b:c8:b9:40:9d:e2:b5:3d:
                    e6:97:ab:d5:8d:9f:53:ba:39:32:95:9b:61:33:9e:
                    d5:9a:f7:08:6d:38:b7:f4:bb:f5:5a:26:33:05:94:
                    b8:c8:8d:b6:27:3a:44:bf:a8:dd:92:63:7f:48:c8:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:E7:EF:C0:D0:A9:BD:CF:9A:CB:F2:8A:32:9C:1B:67:FE:0F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c07257e-4a90-3416-babf-5422b18cffb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ae:a6:ad:85:72:0d:a0:93:75:b2:35:da:e3:e4:b1:b1:fb:
         61:0e:7b:cc:af:2a:b5:2e:21:28:e5:98:29:7e:33:fe:2c:92:
         87:ad:7c:32:fa:2f:b2:15:fc:64:db:21:22:cb:ce:c6:75:72:
         94:0c:b2:82:31:c3:65:82:30:5d:d9:94:a1:9c:7e:d3:3d:1d:
         71:8a:96:22:b4:34:3d:77:7f:cf:28:04:de:c0:e4:01:d3:7f:
         04:b4:e0:0c:85:ab:60:bb:8e:32:68:54:d3:65:46:8c:d8:e9:
         4f:6e:cc:ee:71:88:c2:63:11:2c:1d:6c:5d:fc:09:97:86:12:
         b8:75:92:c7:0b:5a:88:2c:ff:21:44:59:93:cd:2b:0c:67:a0:
         18:d3:d1:a3:2c:8b:78:da:dd:e0:33:af:ae:52:57:62:d9:38:
         a4:55:16:96:1b:da:61:05:b0:de:c9:80:84:8a:34:f7:a4:7e:
         a8:00:32:cd:fa:a0:96:ca:04:9e:fb:f1:6f:bf:9b:7e:06:14:
         5f:0d:52:04:2e:c6:11:40:a4:c8:45:f8:c3:90:fb:8e:74:d1:
         6b:d9:a2:66:e3:5b:9a:89:a7:f6:dc:67:65:76:91:7b:f7:f7:
         a2:27:52:77:4c:b1:62:e9:85:05:f4:42:79:3e:ca:3f:6a:ac:
         b8:0c:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:15 2025 by rpki-client