Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
File:                     c4bce448-2305-31dc-804b-5ab4eabb083e.roa (raw, json)
Hash identifier:          F3u1NsXSUYJ1+tanuYkTSTiNDxSxT9F0f6EFSuS7XmU=
Subject key identifier:   85:F6:C1:35:CF:52:A2:A6:C1:7B:9C:8C:B0:32:4C:22:77:94:3D:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BDD753ADCFFDACB83780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1009:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:bd:d7:53:ad:cf:fd:ac:b8:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=87b9b2f6-0820-4a39-9c44-f72f63675823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:df:14:28:60:88:b3:0b:0d:ec:ab:15:4b:
                    04:1a:d1:e7:21:14:8e:9a:70:0d:89:b6:50:64:8e:
                    07:13:45:4b:44:3e:f9:8e:fc:6d:ad:1d:14:af:3d:
                    41:32:bc:4b:34:b6:e7:8b:71:80:91:a7:0c:b1:d3:
                    ec:2b:25:27:4f:3f:cf:a8:e6:7e:9d:98:69:18:db:
                    34:d2:ef:d6:2d:f1:d3:36:87:83:64:01:ea:ba:2d:
                    b0:94:3c:bd:8e:a7:43:0b:46:00:d3:3b:93:25:ed:
                    89:29:f4:19:7b:2a:9d:ff:c8:f2:cf:ca:ee:7a:4a:
                    52:71:88:4c:65:86:79:6d:51:d4:82:10:a3:2a:99:
                    40:6b:c2:7f:b8:c6:a4:cb:e5:27:22:62:5a:d9:1f:
                    6f:0a:fa:74:a8:cb:59:b6:af:d6:c6:73:a5:8a:26:
                    74:3d:6c:6d:dc:94:93:95:de:aa:e1:13:58:c2:fd:
                    62:58:18:b0:87:ef:98:39:53:2c:b5:9f:b9:07:e8:
                    46:65:04:ff:57:7b:b1:77:19:7f:a1:61:92:1f:dc:
                    f0:80:03:8b:e5:97:4a:c8:42:1f:d2:2c:40:87:98:
                    98:6a:50:fa:83:d7:47:dc:bb:63:20:35:d7:0d:f5:
                    4e:83:b7:c5:61:33:34:db:5c:26:94:5c:43:d1:e3:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:C1:35:CF:52:A2:A6:C1:7B:9C:8C:B0:32:4C:22:77:94:3D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:88:b6:7e:ce:58:fd:44:56:56:70:60:68:7d:7a:51:e7:52:
         25:3f:00:0a:b1:bd:9d:26:59:9c:bf:ee:78:4e:a2:b0:a4:2a:
         ff:41:36:f9:a5:a5:4d:e5:49:c1:29:71:b2:78:0e:96:c4:f6:
         8d:c2:55:bb:01:71:b4:2a:54:c2:29:32:88:d3:00:fc:b7:d7:
         18:33:59:6a:ae:0f:e9:45:96:cc:5b:15:c3:d2:ac:6c:3b:29:
         81:7c:1a:0c:ae:c1:30:b2:c1:6f:0e:eb:0e:8d:c6:46:cd:e3:
         b5:52:47:5a:19:9b:ad:f5:b2:2d:ae:9c:1e:2d:a9:59:28:2a:
         aa:d2:78:82:76:f5:48:54:56:88:9e:8f:d3:8c:b9:4b:4d:65:
         b3:05:27:ee:e9:0c:10:72:ca:24:30:94:45:df:c6:a6:ae:39:
         7b:28:ec:3b:fa:26:69:44:75:ff:7c:4e:9b:35:65:77:83:26:
         2a:23:90:a3:35:b7:2e:c1:b5:14:2c:75:3a:fe:9e:0c:47:5e:
         75:71:7c:31:90:b5:27:0f:0d:c5:e4:5e:88:1f:a2:7a:2a:5d:
         bd:4a:00:ad:01:2c:a9:6e:f1:41:0b:dd:c9:38:41:b0:80:ef:
         3c:c8:f2:9e:b1:09:c4:bb:5b:cf:03:24:8f:85:62:18:29:54:
         be:65:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:55 2025 by rpki-client