Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa
File:                     b8f251aa-f2d7-3840-a213-e4cb5446c019.roa (raw, json)
Hash identifier:          Q8C263WZwsyp2GjaJTPQfHMbeNk21NQG3mMH1xlkjrc=
Subject key identifier:   4A:CB:B5:DA:5D:DA:DD:8A:4F:34:39:70:F2:47:9B:4D:BA:6D:67:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B3E6289B52375D27A800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2600:1003::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b3:e6:28:9b:52:37:5d:27:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=74e424d1-8a42-45cd-8cbd-c0411468c38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ed:4d:29:35:d8:66:0a:86:0d:e0:23:f9:f1:
                    8f:19:a4:ce:4a:84:ad:aa:d2:af:c3:d4:33:76:14:
                    6f:9c:9d:e7:1f:f5:f9:77:65:f4:81:c2:f4:3d:91:
                    4e:ce:9a:83:04:8d:ce:0e:e5:bc:0c:0c:67:5e:95:
                    1a:eb:48:48:fb:be:41:03:a4:ba:eb:41:d0:fc:e8:
                    1d:84:10:39:20:6d:88:ff:04:07:07:58:7c:54:2f:
                    a5:76:b5:49:ac:b0:4e:7b:95:da:16:c5:81:ed:56:
                    a6:28:91:71:a5:4d:77:9d:22:17:f8:79:d2:54:e3:
                    24:0d:dc:62:3d:62:e6:15:b6:a9:26:81:7f:56:a5:
                    bd:93:33:e5:e1:f8:a9:43:b4:6b:bc:2c:8f:ac:e0:
                    5a:a8:d6:c2:c6:db:a9:b4:db:94:80:b7:ee:29:58:
                    40:32:aa:15:94:6b:e3:08:34:20:1d:35:51:33:29:
                    4a:60:ea:c2:06:19:ef:fe:23:b0:57:02:19:41:38:
                    ce:7f:f7:6d:a9:87:b5:14:a5:ea:d9:fe:3b:db:74:
                    29:91:04:85:ac:5b:07:4e:52:04:b6:f9:ba:8c:e1:
                    3d:5b:2f:51:d1:2d:8a:6e:1e:50:2b:f7:dc:49:51:
                    16:62:41:d3:72:e0:da:60:92:06:7d:0d:2e:cf:f6:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:B5:DA:5D:DA:DD:8A:4F:34:39:70:F2:47:9B:4D:BA:6D:67:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:8f:cf:2f:a4:9e:cf:c8:63:68:f2:f1:83:4d:5c:25:b6:
         c7:e5:64:61:a6:15:20:d9:44:6c:82:c7:d1:14:4d:38:c7:ce:
         36:e0:fc:bc:4b:dd:b1:32:b5:91:35:4b:c4:3b:20:48:fc:ed:
         d9:e9:89:6d:ad:5f:7e:3a:2d:86:69:d3:d1:ca:af:76:5f:9d:
         57:ca:0e:33:de:28:78:a2:2b:12:7d:94:71:d9:fd:7c:51:0e:
         28:8d:99:52:1f:0c:cf:01:6c:e3:5a:74:ba:b8:c9:03:c0:ce:
         73:44:9d:bd:04:7b:9a:a6:a8:0f:87:c6:20:75:b4:c6:57:a8:
         d2:af:88:7e:13:dd:06:47:66:36:96:79:7f:4d:d0:c2:5c:2b:
         11:79:6f:09:7a:1d:d0:da:af:03:03:57:17:21:d0:7e:46:6c:
         d1:42:43:92:1b:76:75:b6:ff:c2:33:a6:12:f6:53:a0:af:8a:
         d3:2f:cc:7c:56:40:98:79:d5:d1:26:3d:cb:8b:36:38:b4:ab:
         e3:da:1d:74:2b:24:0d:0d:52:72:d9:24:1d:d8:ca:fb:9a:2b:
         08:9a:5d:20:04:52:88:29:be:23:a6:f1:6b:22:f7:8e:ec:6a:
         b3:b6:7c:8b:b9:d1:0f:25:e3:31:09:98:fe:14:7c:2a:d8:9d:
         e3:d9:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:04 2025 by rpki-client