Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
File:                     1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa (raw, json)
Hash identifier:          c4OUOwv+lu6wMJApdQ9KZsrtughvSPNANaMaUcLlspk=
Subject key identifier:   83:5A:63:C4:E4:3D:84:C7:B1:C3:A4:E6:3B:40:3E:41:61:81:46:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B05CD9384F4DA601FFE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        2600:4041::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:05:cd:93:84:f4:da:60:1f:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=d3a57820-0a12-4f8a-a55f-faba254eb2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:15:8f:46:9a:d2:ef:08:01:7b:d9:54:05:
                    e6:7b:7f:d3:8f:90:1d:87:db:9d:77:6d:3c:b8:6c:
                    00:7b:c3:2b:d8:e4:7b:35:04:5e:11:d9:ac:94:b3:
                    61:f1:77:4f:a5:d3:1c:38:fe:89:99:0c:2d:8e:0c:
                    28:df:be:aa:d9:20:5b:89:90:cb:27:1b:ea:b1:fa:
                    bd:f2:ad:e4:94:42:a8:d5:94:9f:58:7a:0d:ec:c8:
                    ab:95:43:4f:02:fc:8a:0c:f3:7f:c3:09:c7:01:a8:
                    7f:e9:ae:38:34:38:5e:59:ac:f4:23:7f:00:41:de:
                    47:ee:51:d0:4c:12:8a:09:6c:0b:5e:41:db:fb:5c:
                    64:4b:49:49:33:52:07:a4:39:3c:3e:68:c0:a6:e2:
                    30:d7:46:ee:a6:4b:8d:15:82:da:05:3f:27:47:45:
                    ef:ce:e0:6b:e9:78:84:2d:ff:d8:f0:44:d3:11:f0:
                    40:c5:20:12:ab:ce:d4:a9:ac:94:56:ab:84:a6:1e:
                    74:8e:36:9e:3c:97:40:fa:95:c4:f5:35:73:81:53:
                    a1:9c:e2:a5:0e:5b:ce:a8:cb:bc:41:0c:70:67:b4:
                    24:de:22:49:72:da:e4:80:ab:bb:20:ae:06:80:ce:
                    f5:78:ab:fd:e6:4a:33:3c:e3:34:0d:c3:ae:58:0c:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:63:C4:E4:3D:84:C7:B1:C3:A4:E6:3B:40:3E:41:61:81:46:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4041::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:dd:7e:b3:68:b0:3f:74:f6:cd:d4:09:be:7d:d8:22:75:
         04:22:b2:ef:25:51:77:1f:9d:82:7f:9f:da:b6:22:1d:ad:7a:
         0c:e7:c6:c2:42:3e:60:95:6f:30:ef:5e:8c:66:bf:db:ec:c3:
         49:66:83:11:69:ec:47:c1:14:38:14:b6:49:37:5e:d8:80:9d:
         27:0f:03:70:ba:cf:e1:23:25:36:e0:8d:4a:d9:82:27:ee:9a:
         7b:38:cd:5a:15:fc:6c:df:eb:bc:9d:2c:0d:c2:a1:88:0c:39:
         ce:6e:ec:31:aa:08:45:c4:cc:ef:31:d4:92:7d:01:96:c9:19:
         f3:0d:81:43:36:9d:e5:c6:61:5b:cd:ce:c6:da:4a:88:57:31:
         d7:fe:72:7b:46:f6:aa:9c:fa:62:e8:f6:2d:28:d6:0a:02:49:
         5d:8a:88:c6:13:54:14:f4:a7:4e:8b:c2:2c:e1:df:00:c4:cd:
         ed:9c:36:b6:9d:91:4e:96:ea:3e:bc:45:71:af:90:c9:93:0b:
         40:a4:3b:d4:f2:86:05:39:80:54:07:8a:dc:5f:f1:23:bb:af:
         20:26:94:01:1a:b9:ff:cb:5e:83:68:9d:79:b9:ce:74:bb:7f:
         20:c6:89:76:f4:a5:11:94:d2:70:aa:19:2c:99:23:6f:d7:12:
         c6:90:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:09 2025 by rpki-client