Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa
File:                     0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa (raw, json)
Hash identifier:          6IhD4j513t8DCNRTb3kBFA+xuvUT19YSFSwTlEOOoTA=
Subject key identifier:   0F:60:53:C2:64:54:C2:65:1F:B9:6F:8D:61:31:64:D4:FC:50:99:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A2955825214ABE0C2A8141640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1015:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:82:52:14:ab:e0:c2:a8:14:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=e747126a-50a8-4209-a21d-84acbe822848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:6e:bc:5b:23:c5:8f:44:14:0a:c6:10:67:
                    6f:90:73:7f:62:13:9f:75:59:fb:ab:a9:d1:e1:b9:
                    88:7a:bf:6b:cb:8d:f3:48:2f:fb:b2:1b:56:27:77:
                    ec:a9:a6:d8:85:28:24:ea:76:ac:ee:8e:55:4f:fe:
                    7d:ed:aa:75:5b:46:be:b1:03:69:37:85:8e:ce:7f:
                    31:93:56:f3:65:3f:f1:f7:37:26:79:6f:5b:f4:bd:
                    2b:fa:a0:14:30:b0:82:c7:ad:f7:fd:e0:21:e8:bf:
                    02:f6:64:95:6c:71:8c:24:84:21:c5:73:09:91:31:
                    8b:0f:4c:c6:87:e0:0e:79:42:af:7e:0d:d1:05:be:
                    a0:d3:e2:46:3b:e8:8d:13:fe:bb:d1:09:66:ab:1f:
                    3a:a1:5b:1c:08:51:f9:29:14:96:fa:e4:c2:ce:c8:
                    06:26:88:2e:7d:d9:0f:93:b3:6f:3b:64:1a:fa:da:
                    41:5c:1f:b4:2e:60:2c:13:dc:cd:e5:af:65:8e:17:
                    02:82:b9:a9:56:f0:32:60:38:f5:df:3e:78:53:9a:
                    96:a7:6f:06:c9:98:a7:e7:84:c7:51:8d:b5:4a:01:
                    d3:c4:ea:3e:cc:1b:f0:6d:19:f7:80:cc:7a:4e:22:
                    0d:bd:95:95:69:98:72:a5:b3:d2:af:c0:24:0b:81:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:53:C2:64:54:C2:65:1F:B9:6F:8D:61:31:64:D4:FC:50:99:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fa595a1-498d-348f-9f30-e36de6a3a3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:cc:c3:fb:58:6e:a0:65:9a:2b:80:9d:a0:09:5b:cb:c5:
         ce:b6:47:98:70:0f:a2:cb:47:6e:2d:76:f8:82:ce:01:d2:39:
         c7:93:09:03:37:e6:f3:e4:fe:06:d5:b8:bc:31:48:d9:4e:e4:
         26:8b:d3:e1:a0:8a:d7:f7:68:d6:d5:09:19:e3:85:f8:80:11:
         70:2d:8f:4e:7d:76:12:b4:c7:2f:27:bf:e0:76:87:66:7d:ce:
         2d:3e:51:40:63:40:4c:1b:58:5d:5b:f1:3b:28:57:12:61:20:
         76:ef:b3:f8:2d:a6:88:36:b3:80:21:f4:0d:8a:83:9e:e1:40:
         bd:64:88:84:59:6e:08:8a:93:86:49:07:7e:59:36:6b:dd:ff:
         28:c5:44:db:3f:05:5d:6b:84:bf:6a:5a:ee:c9:44:e0:5e:82:
         7b:23:06:a4:32:87:03:03:32:6f:78:9f:0d:ac:ee:92:16:36:
         63:e4:f5:72:4c:db:fa:94:a2:f7:82:20:1f:ca:5e:ef:3a:06:
         50:e6:28:06:04:12:12:00:2e:70:c5:3d:0a:fc:a7:f9:d8:9f:
         87:af:fb:a8:27:77:54:dd:90:3b:a8:fb:59:de:f0:20:51:49:
         52:90:ea:2c:1c:ce:39:fb:65:53:de:99:03:8e:a7:58:e4:ca:
         82:ec:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:31:20 2025 by rpki-client