Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff53dff4-0c1b-3337-afe7-6aa7c04fb062.roa
File:                     ff53dff4-0c1b-3337-afe7-6aa7c04fb062.roa (raw, json)
Hash identifier:          kHHXwWgvuzk7x+Y+R/h20SSvW/5CttF8uzwF3YKquBU=
Subject key identifier:   0E:4C:B2:42:05:0B:0F:19:1D:E5:F3:85:D8:DC:33:D5:32:4C:DC:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF652E108CD6DF4675A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff53dff4-0c1b-3337-afe7-6aa7c04fb062.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2607:f160:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f6:52:e1:08:cd:6d:f4:67:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e4d248a9-d044-47b2-8333-40bd233f1e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:76:3c:8d:61:90:b0:56:88:6e:59:77:19:
                    22:fe:8a:c2:a5:cc:dc:78:ac:bd:9b:94:ae:57:2f:
                    c0:b6:12:38:58:de:a2:86:fc:7a:16:04:2a:e1:c3:
                    70:2c:c4:42:20:f1:81:97:55:ed:83:77:76:fa:55:
                    2a:97:54:03:c3:f3:e3:fc:22:fb:96:e0:74:51:09:
                    92:c3:77:df:4b:bb:6b:5a:d0:b2:27:29:61:08:7d:
                    8b:a6:c8:a4:51:8f:eb:45:57:7a:12:1b:1d:9d:88:
                    97:5b:62:aa:e6:71:ab:73:78:25:a2:a6:6f:4f:1a:
                    9d:38:9f:d6:2c:7e:57:03:9c:28:c8:ea:74:a4:8d:
                    0c:86:b5:dd:42:01:9a:a7:6b:3a:ab:cd:79:be:d6:
                    90:c7:d6:26:e8:b7:54:9b:37:7c:50:c3:02:9d:b0:
                    51:0f:08:27:71:a9:76:5a:34:54:05:89:50:11:62:
                    41:a4:5c:8b:58:18:1f:55:c4:ef:de:87:86:e8:43:
                    5d:2c:00:b8:a5:05:25:72:1e:8a:c5:fd:42:18:70:
                    c9:ef:5c:f8:b7:3c:76:24:b7:72:81:78:63:24:22:
                    4a:b3:fb:35:e2:f4:18:30:81:66:51:a5:92:eb:54:
                    dd:6b:a7:90:cb:98:ce:9a:81:7c:c1:af:be:a0:e3:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:B2:42:05:0B:0F:19:1D:E5:F3:85:D8:DC:33:D5:32:4C:DC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff53dff4-0c1b-3337-afe7-6aa7c04fb062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:86:a2:17:e8:47:32:40:46:38:54:f5:ed:99:47:cc:5e:55:
         21:1c:76:c7:52:8f:58:de:98:68:92:d1:55:ef:cb:74:29:84:
         c8:4e:f8:ce:e2:89:a4:d3:ad:6f:fb:c1:07:61:a1:52:43:02:
         08:6f:8f:3c:70:18:e1:78:ff:22:db:aa:fe:6b:66:2a:c4:5e:
         d4:68:06:e2:28:53:22:d4:4e:b7:38:9a:71:ab:25:d0:fa:56:
         96:06:10:89:23:cd:42:f0:00:74:51:3e:a2:51:aa:9e:7a:ef:
         56:d0:a0:9a:62:7d:10:b6:d5:43:8c:7d:3f:c3:c0:42:0c:bd:
         1f:2b:2e:51:52:fd:8a:40:51:bb:4e:6e:47:2c:75:38:c2:ce:
         8c:ea:de:ff:03:1d:a0:e8:3e:0f:43:b0:de:73:df:4f:0d:f3:
         81:75:93:59:97:3f:d4:bb:34:2b:c6:d9:e0:a8:6c:1e:a7:c7:
         6d:2d:26:75:13:55:e4:43:00:20:b7:eb:16:15:45:6c:80:af:
         b4:4b:e8:88:18:ae:cd:21:b7:ed:3e:fd:97:61:cf:cc:46:76:
         d5:54:8f:51:1b:02:d5:a5:69:fd:a7:32:66:49:83:51:b1:86:
         0a:5b:5e:a8:f5:8b:69:cf:35:af:ee:4c:2e:06:c6:c6:10:bf:
         8a:34:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:21 2025 by rpki-client