Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa
File:                     07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa (raw, json)
Hash identifier:          LMhbImUrzoE0MolXiMHFjq/lnFCUF95DsI6ALlTQLvc=
Subject key identifier:   27:DB:32:6D:B3:BD:49:D1:58:A4:F2:B6:65:57:6B:A7:EC:72:BC:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B148DD9C90E549DD13C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1002:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:14:8d:d9:c9:0e:54:9d:d1:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7446ae16-7b64-4aa8-ad13-7e0dc3370750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:dd:52:75:65:fb:ab:51:e5:35:41:6e:aa:
                    5f:f6:93:13:09:b2:70:bd:85:32:3b:92:20:be:56:
                    b6:01:8c:ba:cb:c8:71:5a:48:37:e7:b4:53:16:4a:
                    15:c3:8a:cc:de:78:7f:2c:49:90:b3:f4:ba:58:45:
                    85:5b:8e:b2:06:f7:1a:d5:b7:6a:23:88:cc:48:06:
                    a5:55:27:ac:35:01:fc:f0:17:53:c3:7a:9e:ef:40:
                    61:6b:3c:44:02:81:f9:bd:c3:f1:a2:35:f9:85:c9:
                    3b:72:ce:54:41:41:14:33:2b:53:46:49:96:b9:69:
                    5c:ba:7a:16:da:96:c4:6a:b3:40:cf:61:69:82:62:
                    cb:2c:73:9a:74:8f:cb:90:17:4c:db:b8:e9:1f:da:
                    dc:03:e7:63:58:2c:c0:b7:ba:d0:f5:79:c4:eb:d8:
                    b5:df:ce:ce:1d:5a:d8:d8:c6:3b:da:5c:a4:9a:a1:
                    2c:c6:be:b6:70:7d:66:5c:4f:67:2d:4f:e2:07:20:
                    21:24:ef:31:9c:7b:a7:9c:b5:8c:74:b0:81:31:91:
                    0e:f2:2d:40:b5:04:6e:be:12:97:47:76:ae:4f:b6:
                    c2:bb:69:39:1c:44:6e:57:77:bc:18:80:7c:7b:78:
                    f1:8a:85:59:e2:af:6c:02:8e:20:1b:db:ac:60:84:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:32:6D:B3:BD:49:D1:58:A4:F2:B6:65:57:6B:A7:EC:72:BC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:50:49:3f:7b:26:62:ce:25:b7:82:8c:00:66:b1:5f:35:cd:
         28:7c:29:d3:e4:b2:f8:78:ff:52:8f:8a:ed:fe:83:dc:75:19:
         66:f8:0d:b7:4a:56:6d:47:05:89:83:dc:46:a2:ad:1a:a5:e5:
         f7:b7:54:00:45:b8:ae:3b:27:5a:ea:31:09:f0:59:5f:f8:72:
         c0:a0:10:be:73:5a:0b:ee:24:0f:7b:52:85:64:b2:35:38:10:
         9f:13:52:f4:f9:16:93:4d:6b:f9:84:77:ab:c7:54:1e:56:f2:
         f0:46:7c:e1:38:18:ec:a7:09:ac:d0:01:dc:3e:a7:29:bf:13:
         67:bd:7a:dd:e0:0f:7d:03:54:fe:3c:ec:8c:43:3b:35:b8:85:
         53:08:97:39:5f:dc:0e:2e:f0:f0:ea:24:3d:79:96:78:da:7f:
         d3:db:c1:a4:37:fb:5b:62:fb:89:92:4f:90:49:76:40:ba:66:
         12:68:d4:fa:0f:e2:64:2b:47:aa:29:81:be:02:f9:c4:f8:cc:
         e5:17:a8:5a:b7:1c:98:4d:1d:c0:dd:2d:c9:a4:1f:c4:6b:ee:
         23:ac:68:0a:79:6b:b0:3f:ef:ca:00:11:8b:93:18:41:91:43:
         0f:45:88:49:af:ac:11:34:b6:9c:74:14:d6:76:14:bb:35:3a:
         e0:64:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:10:33 2025 by rpki-client