Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dec7c778-c70a-3528-8f54-b47cceb3da93.roa
File:                     dec7c778-c70a-3528-8f54-b47cceb3da93.roa (raw, json)
Hash identifier:          wUWVguFas1miqlKAzeqT4t0lsB7RCC7rr5acEibgyG0=
Subject key identifier:   29:D4:53:8C:1C:E3:D6:DC:FF:0C:BA:28:5A:9A:DC:DB:2F:39:8F:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A857604FE15F9BBA39850F300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dec7c778-c70a-3528-8f54-b47cceb3da93.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:100e:b328::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:04:fe:15:f9:bb:a3:98:50:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=72827cca-62c9-4816-8cdb-c69170b10716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:3f:78:87:c2:40:e7:03:b2:bf:c2:58:95:
                    7d:46:d5:64:99:47:ff:bc:4d:bf:7c:fe:9c:02:ac:
                    7c:45:a7:98:56:6f:72:c7:1c:31:85:c0:e1:c9:da:
                    60:e1:60:4b:af:9b:77:8d:0d:79:ae:96:81:68:19:
                    39:31:a2:8e:84:9f:9f:26:2d:17:01:3b:38:bb:05:
                    e5:bb:65:5f:8a:25:24:0a:02:9b:ac:2f:c0:d5:76:
                    b7:21:5f:2b:82:0a:4a:86:a3:fa:61:2b:83:53:57:
                    3e:28:a9:6f:83:1b:3a:2d:05:ed:ca:4e:6b:57:cc:
                    19:a1:37:b3:5f:8f:31:01:2f:69:f3:f3:2f:e0:28:
                    89:1c:e5:0d:25:e4:96:1c:c9:af:d1:6a:e2:07:41:
                    d6:f8:83:b1:18:07:ba:df:fb:3c:f6:87:8c:75:6d:
                    b7:45:69:ea:cd:42:c1:4e:94:4e:ba:09:73:d7:a3:
                    df:4a:10:f7:c1:7f:56:d3:bc:60:b7:54:00:5b:11:
                    6f:72:4d:dc:49:a9:dc:f4:31:79:ec:da:d1:fd:96:
                    61:87:7a:67:e1:be:9d:00:64:a4:c3:5c:b6:6e:ae:
                    13:31:8c:b9:a3:95:68:f3:08:03:66:5b:70:75:27:
                    4a:5c:77:76:6e:06:e6:b7:23:f7:1a:d3:30:c7:b3:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D4:53:8C:1C:E3:D6:DC:FF:0C:BA:28:5A:9A:DC:DB:2F:39:8F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dec7c778-c70a-3528-8f54-b47cceb3da93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b328::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:ef:18:4f:24:ba:8c:92:fe:c1:d5:e1:cd:32:21:aa:ee:
         1b:df:aa:76:6b:ec:12:a3:f8:e0:bb:5d:90:6e:46:56:91:ea:
         0d:24:da:8e:b6:83:92:7a:64:c2:b2:ee:c6:f4:5c:e7:d8:1c:
         c3:b6:11:6c:4f:e7:d6:97:56:72:4b:5f:b6:1b:40:d9:60:67:
         2b:87:8c:39:db:a3:b7:b2:f9:7f:83:d5:85:39:9f:92:bd:48:
         63:93:ff:7e:01:5b:c2:40:e4:ab:d6:bc:49:c0:26:81:58:03:
         93:a0:b4:62:c5:68:8c:75:5d:7c:84:cb:ce:14:20:40:d4:e1:
         aa:29:cd:91:b9:1b:94:c6:c7:21:32:50:0c:4e:74:17:93:23:
         df:83:67:be:10:7b:e4:6d:eb:ec:16:2b:0a:2c:8e:a9:26:9c:
         d1:04:49:e6:51:f9:4a:47:3d:79:d3:33:e4:8f:f6:33:4d:49:
         74:55:68:fe:e4:58:f1:ef:ba:c1:1e:a7:42:93:82:f5:d8:bd:
         73:d6:7c:a6:44:f3:0d:8b:93:48:28:24:25:5b:e0:f8:5a:f7:
         04:02:8a:58:f8:6a:c2:2d:72:b0:b9:bb:f9:33:18:e3:97:ca:
         64:74:e9:fb:6c:78:37:66:0a:24:b6:74:bd:9d:d9:a4:84:d6:
         f9:fe:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:04 2025 by rpki-client