Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb96cf54-fdd4-3e8e-b202-2b1e8c586969.roa
File:                     fb96cf54-fdd4-3e8e-b202-2b1e8c586969.roa (raw, json)
Hash identifier:          p4u5s0Th+FICyMAw3n568fhgXVdaPjcAcr19iljzYZA=
Subject key identifier:   3F:09:AB:45:27:0B:F7:D7:31:8B:0D:BA:7A:94:9D:4E:83:D9:76:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15ECFA80488AB93396CDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb96cf54-fdd4-3e8e-b202-2b1e8c586969.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:100f:a038::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ec:fa:80:48:8a:b9:33:96:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=df367768-39b4-4c56-98dd-4f288db58f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:b3:ed:14:65:89:5d:54:1b:0a:c6:bc:08:
                    95:2d:f5:b3:32:74:ee:a5:2e:21:e4:a9:21:84:9f:
                    da:f2:a7:f4:3d:22:09:7c:f3:6a:50:e3:07:5e:f2:
                    f4:00:9e:0a:fb:08:5e:59:07:e2:5b:89:f2:b8:d6:
                    1e:58:7d:c5:44:0e:d8:9c:f7:8a:48:85:76:2d:d0:
                    29:22:4c:4a:82:6f:f1:a2:58:94:18:6d:fe:06:6a:
                    d9:53:ee:eb:46:f7:7b:90:74:4d:97:54:5a:5e:ed:
                    33:78:5b:a7:bb:35:55:70:8c:42:8d:87:8e:76:de:
                    41:d1:05:57:8b:31:74:5c:c1:5c:9e:42:71:1b:50:
                    7d:a8:81:75:89:3d:5c:9a:7e:f2:56:82:cf:a2:88:
                    a8:bb:ad:26:1c:55:6b:13:73:6c:fa:16:06:3b:86:
                    9d:f7:8e:76:c0:8a:7e:d5:32:c3:a5:d5:34:34:b8:
                    c9:68:ac:0c:58:a1:5a:f6:22:fa:62:99:a5:d1:b0:
                    fe:1f:ae:5b:bb:4f:80:bc:13:8c:9f:d0:77:d6:43:
                    ba:8e:02:88:37:7d:4a:4c:68:42:e6:8d:c5:a8:84:
                    f9:37:c5:e3:aa:92:c4:60:6e:c9:72:38:4e:33:75:
                    ef:22:34:e2:e6:90:88:25:9b:1d:f1:47:31:84:7d:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:AB:45:27:0B:F7:D7:31:8B:0D:BA:7A:94:9D:4E:83:D9:76:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb96cf54-fdd4-3e8e-b202-2b1e8c586969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a038::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:96:61:c6:c1:82:64:95:03:fd:78:5a:4a:bf:20:8a:2b:
         8f:76:13:a9:28:7f:cc:7b:cb:c9:5f:96:dd:01:dc:3e:ea:b0:
         89:01:19:ca:ae:04:9f:f7:63:11:f4:4e:dc:69:61:6f:98:e3:
         38:4c:52:61:96:1a:3a:64:23:e4:02:d3:37:34:28:18:8d:33:
         18:f0:49:1a:59:2f:d7:7b:0c:c4:8e:a3:1b:84:7f:52:78:e1:
         0e:c5:cf:19:dc:71:c5:ec:41:7b:be:b4:ad:ba:55:28:31:5a:
         6b:22:cd:16:d6:a8:9b:f1:d6:36:be:4a:92:6c:9e:05:09:61:
         a4:08:d6:28:a7:0d:5e:94:03:a3:50:ae:6c:3a:6e:5f:2c:a0:
         7b:b0:9d:fb:32:64:83:33:d0:45:41:9f:09:de:a4:2b:1f:2b:
         5d:39:59:18:1c:ff:36:e9:b8:fb:e3:3b:44:96:fb:f8:bc:98:
         4d:f9:77:7d:4f:34:c9:3d:18:f3:2e:e3:2f:fa:21:c6:64:2f:
         aa:1a:92:43:f9:af:59:6f:68:d2:12:09:ad:3a:80:e0:f7:60:
         ef:34:a9:bb:a4:88:a6:4e:81:99:0e:72:5c:d1:7d:f9:2b:d8:
         ba:1b:1e:f0:47:db:79:ab:f5:f3:86:2e:aa:d9:2c:97:f4:21:
         ae:b4:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:40 2025 by rpki-client