Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/440f0d6e-2ec0-39de-91a8-975e09afd27f.roa
File:                     440f0d6e-2ec0-39de-91a8-975e09afd27f.roa (raw, json)
Hash identifier:          TC9PmQZPyU/nGkaDbPWwq9nBvwxKy1+czI3X0Lv/w38=
Subject key identifier:   A1:48:70:05:97:2F:D9:FA:3B:08:61:DE:14:EE:07:16:93:38:F1:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A42757F6D7CFB4ED688074A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/440f0d6e-2ec0-39de-91a8-975e09afd27f.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        2600:100a:b0e8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:7f:6d:7c:fb:4e:d6:88:07:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=ac41328a-2efe-4bc2-8295-29e5dec0ecb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:ac:c2:e9:37:56:0a:0e:8f:9f:d8:fe:be:
                    cf:08:7e:e6:e0:a1:b5:bc:ab:45:34:64:7e:75:b2:
                    ea:1d:22:18:8e:c9:b5:74:5e:39:b8:2c:54:ba:92:
                    47:f6:3e:82:8e:ce:d5:b0:27:2d:f1:81:1d:61:59:
                    dc:f6:23:b3:86:b4:57:15:aa:3b:7f:91:f2:bf:c5:
                    19:75:6a:e9:a2:e8:08:25:07:be:7d:ac:f6:8b:39:
                    c0:19:74:25:1f:cd:05:de:97:7a:42:39:5d:6d:8e:
                    70:d0:36:98:7f:2a:3a:7b:42:1f:65:9f:82:de:1b:
                    19:5e:5c:8d:7b:d3:80:b1:72:04:2e:af:e5:1e:44:
                    b2:43:a9:29:7e:bd:1d:11:12:fe:62:f7:d2:0e:d5:
                    c6:14:8f:e8:f7:5b:43:a3:6f:36:50:86:8a:d6:a2:
                    2d:cf:ab:47:65:2c:79:6a:56:a6:1c:04:e1:7a:50:
                    93:f6:87:aa:6f:f6:11:f3:b2:a0:e3:e0:de:bd:3c:
                    f9:67:f0:e7:65:63:74:a6:a6:26:0a:7e:fc:8a:4f:
                    2d:50:59:e3:71:fa:1d:3f:85:12:ea:14:51:b3:83:
                    c4:eb:25:99:49:26:4e:22:29:e1:60:09:0b:fb:22:
                    9d:7c:67:0a:58:71:d5:3f:81:86:28:09:e8:1f:f8:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:48:70:05:97:2F:D9:FA:3B:08:61:DE:14:EE:07:16:93:38:F1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/440f0d6e-2ec0-39de-91a8-975e09afd27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b0e8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:13:46:09:a5:43:7a:24:bf:ee:17:c3:54:42:8f:ea:cd:
         c3:8d:11:bc:56:4a:33:37:fd:03:d3:c5:64:19:95:f9:e0:72:
         60:4a:06:f9:98:6d:46:96:91:64:b5:98:37:91:93:ba:f0:e2:
         d5:85:f2:2e:b3:68:ff:a6:18:a8:16:3a:00:f1:96:fc:36:b8:
         96:ba:61:2d:a3:b7:23:45:15:8d:8b:56:c5:16:6f:62:96:a7:
         91:61:08:92:a3:a8:6f:c8:2d:15:6d:0c:49:74:d3:0e:ef:72:
         1e:28:94:70:c5:12:c0:21:fb:0c:b9:8f:f0:49:e3:6c:dd:47:
         45:86:8a:ed:64:a3:a4:c0:8d:02:7d:12:1f:da:3f:bd:a6:76:
         2d:84:14:be:bb:8f:db:55:3b:e9:3a:67:bd:33:da:65:6e:83:
         d0:4e:d0:31:24:9c:c0:b6:c9:b6:a9:08:7b:6b:98:f1:6c:d1:
         d4:75:8b:81:e3:a3:43:8f:6f:7d:a9:d9:ef:b6:78:ac:48:ee:
         8f:1d:35:0e:44:1b:e1:92:60:88:1f:b3:05:58:69:98:31:6e:
         7f:96:c3:31:6e:00:db:5a:14:6a:83:c7:be:e2:f7:e9:3e:da:
         01:a7:49:b3:7e:84:81:8b:47:97:4c:44:57:b1:cb:08:f4:a9:
         d4:2c:d4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:14:05 2025 by rpki-client