Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb6cd11-96e3-34bf-98f7-35f6a88da64b.roa
File:                     ccb6cd11-96e3-34bf-98f7-35f6a88da64b.roa (raw, json)
Hash identifier:          uaMD9dt1Zu7G7q0iFt8d+Jmh6k9VdenBxmGPTFZxi0Q=
Subject key identifier:   F2:90:34:21:43:38:63:87:64:55:AB:28:A4:6B:9D:84:AE:2F:B4:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196C1925FF3E31872571B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb6cd11-96e3-34bf-98f7-35f6a88da64b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2001:4888:a610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c1:92:5f:f3:e3:18:72:57:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4b29ab0e-5635-4133-b03d-3cb4d813592d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8d:1c:67:ea:23:0b:95:50:46:f3:91:9d:64:
                    35:f8:da:66:fc:13:9e:1e:1c:b5:02:0b:09:ae:50:
                    6f:1b:e5:42:69:97:f6:44:a3:55:ae:42:ea:e1:f7:
                    e2:23:b4:09:30:11:43:c4:25:c1:e1:35:54:7f:13:
                    02:72:19:b5:4d:e6:db:ed:58:dd:97:a4:aa:e7:3c:
                    85:ad:19:97:01:84:1f:ff:fe:3c:c6:04:14:36:c3:
                    e5:86:31:a3:26:68:ac:b3:ea:79:6b:94:99:28:c5:
                    90:15:b1:a7:8c:f4:bc:3f:4f:5f:ea:bb:e8:83:ad:
                    8c:28:06:8f:b6:26:9c:9e:d2:bc:c3:d6:1b:39:7e:
                    9f:84:8f:9d:f4:14:26:73:55:2a:79:9a:c0:6e:e1:
                    0b:9c:f0:f1:ed:f2:b1:95:d5:a9:bc:b6:f4:ac:da:
                    d7:f7:be:6a:1d:3b:3a:1d:ed:fb:dd:ed:8b:96:06:
                    45:38:ff:13:03:6c:76:47:0d:10:11:4b:f1:3a:41:
                    94:cb:ef:b3:14:74:9e:f5:10:ba:1a:0b:e6:2a:7c:
                    23:cc:a1:a4:12:29:2a:99:16:f5:52:ac:c5:12:19:
                    2e:ef:6a:fd:74:4b:f6:96:c8:69:d8:49:0c:1f:3a:
                    02:34:ac:85:bb:16:0b:8e:48:16:c2:5f:b7:f3:93:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:90:34:21:43:38:63:87:64:55:AB:28:A4:6B:9D:84:AE:2F:B4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb6cd11-96e3-34bf-98f7-35f6a88da64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:b7:96:e0:0c:e5:58:b0:ee:1d:17:fc:10:d8:f6:d7:95:
         96:79:e4:de:05:30:0d:da:59:c7:e8:9d:76:bd:05:1f:d2:0f:
         06:81:31:b8:7f:f5:8b:d1:f2:ea:db:77:34:6f:41:48:a4:14:
         94:31:3e:e6:61:16:10:c7:7d:07:8c:b8:2e:1e:d0:aa:9a:fd:
         c2:b9:7a:64:56:2a:58:22:f4:3c:6d:a4:f2:4a:ac:c6:a7:3b:
         93:a9:46:b9:14:76:52:04:8c:fb:75:26:ae:fa:3f:c3:55:88:
         d6:82:05:98:86:97:2b:6f:22:f7:26:21:89:7b:44:60:e9:50:
         04:87:c8:20:5f:fe:15:19:65:c1:5d:e0:fd:c5:31:8b:46:80:
         15:f8:6f:74:c2:4b:45:a2:54:18:5a:21:9c:b0:87:07:e9:4e:
         86:ea:c7:4c:1b:17:3f:57:c0:2e:d0:e2:6d:b0:82:dc:1b:18:
         07:e7:75:82:34:96:f0:5c:17:ff:21:94:d5:25:77:8b:37:8c:
         c0:71:5c:4e:82:93:d1:fb:aa:1a:50:2d:73:88:4f:e7:ee:e8:
         b9:83:fd:d1:81:42:32:69:4d:67:07:6f:2c:12:50:ec:87:7a:
         f2:6a:a1:8e:c8:7a:eb:0e:b8:9a:4a:27:81:a5:b2:41:25:54:
         1b:32:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:30 2025 by rpki-client