Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0878610b-06cc-3d0c-a9bd-61b04de7cd06.roa
File:                     0878610b-06cc-3d0c-a9bd-61b04de7cd06.roa (raw, json)
Hash identifier:          cMlOlz2kE3zA0M1W+Dgp2HTl2+0nylOdV7x2OXW9Cww=
Subject key identifier:   0B:BF:3D:CF:A0:85:51:6F:F3:1A:CA:BE:5B:2E:62:77:6D:E5:1C:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A4CF2B65DFD3B98FC39EA8D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0878610b-06cc-3d0c-a9bd-61b04de7cd06.roa
Signing time:             Tue 24 Jun 2025 19:11:14 +0000
ROA not before:           Tue 24 Jun 2025 19:11:14 +0000
ROA not after:            Mon 22 Sep 2025 19:11:14 +0000
asID:                     6167
IP address blocks:        2600:1002:b088::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:f2:b6:5d:fd:3b:98:fc:39:ea:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 24 19:11:14 2025 GMT
            Not After : Sep 22 19:11:14 2025 GMT
        Subject: CN=896cbc18-f59e-45b2-a133-cc16af193df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:dc:09:1c:69:fb:84:03:5d:dc:d5:4b:83:
                    86:f9:b6:cc:28:77:84:90:41:25:61:14:78:97:09:
                    e8:ab:d2:f4:51:53:f1:28:bb:bd:d1:ec:25:78:b9:
                    a2:17:f3:a7:52:95:89:aa:9f:dd:f5:ef:d9:2a:f6:
                    ca:ce:b1:57:c5:5b:b9:a9:14:48:d0:92:20:fe:97:
                    30:18:ca:28:d3:9d:3a:63:8f:59:e7:fe:bb:a2:2c:
                    5e:f5:f4:ad:bb:3d:70:b0:9b:8d:17:7f:96:4d:1e:
                    74:62:62:7d:63:9c:02:5f:62:36:d0:75:8c:b6:55:
                    82:44:e4:d4:53:f7:78:86:54:a8:eb:79:4f:81:83:
                    da:b3:f8:74:aa:c2:a2:60:eb:64:b9:e0:09:b5:83:
                    f1:2c:1e:ce:de:ad:3a:3e:12:c7:dc:7f:74:ab:a7:
                    80:58:4c:74:82:d2:07:f7:45:1b:9b:b0:37:ec:bc:
                    f3:0e:cf:09:e4:75:e9:e0:28:c2:3d:1b:a0:6d:08:
                    1c:a0:31:ff:07:e7:1f:e2:bf:f9:b2:a8:01:64:56:
                    38:ca:8f:39:5a:95:33:4e:17:65:ac:78:14:86:45:
                    ca:60:cd:6e:af:f8:86:71:bd:b0:4c:2d:00:bc:8e:
                    c7:84:88:f1:ed:2a:6b:81:19:75:c5:1c:6d:f8:8d:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:3D:CF:A0:85:51:6F:F3:1A:CA:BE:5B:2E:62:77:6D:E5:1C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0878610b-06cc-3d0c-a9bd-61b04de7cd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b088::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:2b:c5:5e:e5:d3:1a:ef:13:57:fe:e4:a5:e4:69:dd:17:
         ce:77:30:9e:b4:4f:45:22:f1:4d:b1:16:60:b0:c5:8b:41:5f:
         3d:65:d8:e5:a6:6a:7b:87:cf:48:88:51:d1:17:17:7f:2d:69:
         3f:1b:56:c6:77:17:92:40:41:54:0c:c6:2f:c7:9e:26:a2:d3:
         f9:78:06:8e:e8:f9:17:bd:9a:fb:e0:7e:dd:f7:a0:c6:f2:93:
         52:09:2a:0f:89:16:17:86:9a:97:d6:9e:b7:2e:f7:5a:ed:7c:
         4f:f9:23:6c:d8:91:2e:8a:21:9c:47:6b:97:12:0b:b3:25:f8:
         d0:2e:ae:30:64:9d:eb:46:db:f4:c5:52:9b:d3:c4:a4:74:3f:
         64:94:a4:39:41:e5:cd:8a:10:24:d4:06:3b:d9:c4:f2:f0:df:
         b1:05:43:db:48:03:3e:bb:f5:32:03:a5:b4:70:0f:a5:df:f6:
         92:dd:b4:37:a5:ba:65:e6:43:75:1b:53:23:3d:fd:66:96:a5:
         af:79:b0:3f:c5:0c:3e:21:57:e6:29:85:59:99:7f:51:23:fa:
         76:59:4a:f7:70:33:31:07:e5:ac:81:cb:3a:1d:36:ba:35:51:
         bb:c8:f9:54:93:3a:34:81:14:eb:29:26:9a:d1:2c:5d:84:5c:
         8e:3c:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:42:01 2025 by rpki-client