Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa
File:                     1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa (raw, json)
Hash identifier:          0KMSHafG2/LYm8Vco8K72QP78hbLxUibzYlGKFvtmGM=
Subject key identifier:   3F:E6:14:27:83:00:43:CC:50:99:00:13:A2:03:AD:6F:54:E8:EA:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E0BF8A1AE4E30795800A3100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        2600:1008:b320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8a:1a:e4:e3:07:95:80:0a:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=31da0fdd-a5aa-4042-a023-08cbd68853a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:7a:3f:86:01:a8:84:37:b0:5e:21:94:31:
                    3f:ea:27:7e:bf:e6:f1:4b:5d:55:17:6f:9e:ec:5b:
                    38:65:54:64:08:f1:15:cf:13:e4:48:b1:9a:1d:73:
                    8d:5e:a3:02:c6:e3:08:0c:27:59:c4:79:2d:db:37:
                    d7:04:8c:d7:77:79:2f:4e:16:ee:41:03:d1:d2:33:
                    e1:dd:ad:59:f8:c9:56:58:cd:46:f2:8b:29:1e:e4:
                    69:de:09:db:d5:87:0e:ab:5b:db:61:93:44:34:a3:
                    8b:b4:2d:8b:4f:27:fb:5f:2a:23:1f:1f:60:dd:ac:
                    75:01:ef:15:9a:20:47:47:ad:f0:50:89:55:dd:8d:
                    0e:fa:56:47:25:1b:e4:0f:bb:71:33:b1:7d:80:1f:
                    a4:71:16:95:26:bb:73:80:2b:2f:5b:00:2c:5b:39:
                    66:8a:ae:2c:49:c0:7b:d7:d0:1f:ab:30:a4:c2:15:
                    a4:78:a5:41:d9:18:3d:73:fa:84:11:6b:b6:a4:9f:
                    0d:48:4d:8c:1b:17:6e:6b:9e:a2:12:e9:7f:50:51:
                    fd:a5:e0:87:1f:78:cf:15:95:c3:64:86:ab:8d:47:
                    e2:39:2e:3e:a6:ce:58:8f:59:1d:6d:ff:e9:ca:b9:
                    a7:c7:46:ae:0d:87:a7:bd:4e:af:b3:db:58:d6:27:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:14:27:83:00:43:CC:50:99:00:13:A2:03:AD:6F:54:E8:EA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a6c7cef-62e5-308b-b6a9-f82a49f7c483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:b1:bb:06:59:4f:21:cb:d0:f8:41:c3:91:e7:c1:77:70:
         99:9a:c1:21:5f:42:2c:9e:76:ea:f7:28:f9:91:32:12:f6:97:
         a1:bd:4f:0b:dc:78:b5:8e:74:6d:46:1d:0d:bc:af:ee:3e:78:
         2d:a8:20:b6:5a:3d:01:4a:b4:e1:a1:19:7b:5a:0b:2a:a8:f4:
         82:24:90:cf:71:be:93:e4:cf:e6:bd:22:1b:fc:e6:e2:60:8d:
         11:6a:9b:24:de:21:00:50:56:e9:a7:1d:3a:ec:94:41:f0:ce:
         9f:cc:a1:30:06:10:81:1c:90:e3:a9:e9:c1:e3:53:ad:13:4b:
         5e:c7:48:e9:c5:57:6e:12:2d:3d:c5:26:51:47:56:45:08:1a:
         c9:fd:15:55:2e:88:f6:26:d7:14:b8:26:74:e4:9e:a5:42:88:
         88:65:0c:58:07:37:e7:9f:86:2d:78:19:1b:70:b8:d9:88:7e:
         11:6d:f5:2c:6d:64:b8:4e:cc:98:0f:c0:02:01:9a:05:ed:20:
         06:2a:23:a1:5d:bd:fb:dd:1e:8f:b8:f9:24:d2:b5:9e:67:fd:
         d3:83:f4:e2:f6:ca:46:70:90:6c:63:f5:ff:04:25:3d:c4:f0:
         ed:c5:54:3d:56:72:f3:23:29:61:0d:4d:8f:07:e8:06:84:1f:
         f3:08:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:51:56 2025 by rpki-client