Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa
File:                     1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa (raw, json)
Hash identifier:          nPwFx+5GD112Nl2Ix0nq09SgiXPQT+6QfPVUWa83KIM=
Subject key identifier:   84:36:BD:E8:93:15:59:E9:83:8A:27:2E:94:03:7D:8A:C2:10:EF:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B484FEC254B6708BF1680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1003:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:48:4f:ec:25:4b:67:08:bf:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=d3e4702d-c3d6-497c-8362-5ed3bccf3543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:d1:60:ef:eb:df:b4:94:ef:c6:cb:c5:56:
                    e0:bb:9d:62:8e:24:69:d5:05:7a:fd:a4:b0:d1:4e:
                    fd:95:26:53:d0:7b:f5:0c:fc:22:a2:64:59:87:4e:
                    19:5b:bd:fb:e6:e0:38:fe:30:0f:b7:06:e2:29:f0:
                    14:3e:e1:30:b9:57:59:15:b2:f2:d1:27:c3:b9:c0:
                    79:8b:ff:39:61:72:20:58:63:d2:65:38:c2:9c:68:
                    b6:87:b5:b4:73:72:95:90:55:8b:2a:3b:47:88:6d:
                    a5:dd:cc:da:2a:38:76:96:24:56:fe:23:6b:39:4c:
                    c6:79:3d:32:8f:ac:43:5f:1f:00:e4:8f:f0:e9:7f:
                    5f:26:5d:8d:e3:88:93:48:60:02:53:6b:85:c5:ad:
                    17:50:53:6b:b6:82:c4:10:88:e6:f4:cd:c0:24:90:
                    3b:88:ad:a8:c3:a1:ff:6c:83:58:2b:af:bf:66:fb:
                    cd:8c:a0:bb:af:f1:25:4c:f3:42:fd:e4:20:ca:bf:
                    9b:53:c7:82:8f:0d:54:91:db:4d:18:7a:d9:9d:bc:
                    d3:e6:52:5b:40:82:61:6e:02:c7:30:5d:e0:00:50:
                    7b:c7:b1:1e:bb:76:b2:0b:a8:44:bb:92:be:71:58:
                    37:3a:41:16:0b:5f:ef:01:22:6e:b8:73:5c:16:f5:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:36:BD:E8:93:15:59:E9:83:8A:27:2E:94:03:7D:8A:C2:10:EF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3e:72:ce:9b:ae:44:66:0b:48:66:a5:f4:eb:ca:99:10:6c:
         46:5f:48:e5:4a:e4:49:eb:8d:b6:63:2a:13:f1:65:f7:4d:7d:
         1f:57:48:a2:0d:cd:5c:ff:75:a9:15:c5:1c:78:75:76:30:fc:
         2f:01:ee:b2:90:45:46:91:bf:c0:d1:b7:c6:3e:2c:55:08:25:
         60:4d:0e:0a:9c:52:b3:56:4e:fa:b4:7e:b1:5c:d8:eb:0e:e2:
         d4:b2:e3:27:9d:9f:fa:c1:8a:41:95:91:75:18:36:c8:61:83:
         ae:86:0c:ff:3b:d9:ad:4b:fd:02:83:aa:bd:e8:f5:73:46:2b:
         e4:1a:db:74:cb:94:be:80:6a:d4:39:4d:b7:d9:06:4e:66:85:
         f5:e2:4f:24:a8:e6:91:f2:48:14:34:cf:6a:b7:1c:f8:61:8c:
         ac:da:03:e4:70:6f:86:1d:5a:df:49:fa:48:22:26:7c:7f:79:
         cb:45:0b:19:2f:98:5a:76:7d:b4:05:54:1f:50:3f:c5:3b:13:
         1c:a5:1c:d1:d5:65:06:d4:a0:d1:61:fc:c0:06:84:b2:83:60:
         4e:d1:1d:79:3a:33:c5:c7:c1:25:56:30:6a:f8:5c:6f:66:1c:
         56:88:6e:9b:bb:94:75:69:04:68:95:95:e8:b0:48:75:ba:8e:
         49:33:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:30:21 2025 by rpki-client