Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa
File:                     2985ed9e-6a26-3c06-9051-3bb4f6140077.roa (raw, json)
Hash identifier:          0aZ//1d2ri7KsDMCbUQmLVAqMiS9VoUlFTAwfToAQQU=
Subject key identifier:   8C:E6:59:A2:0B:21:77:F0:2C:6E:43:C6:D1:DD:5A:8B:C2:A2:55:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B15A59CA8745997F28E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1003:a011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:15:a5:9c:a8:74:59:97:f2:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b58fef13-5c95-4868-a414-7855b9b5b02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:60:57:26:fd:7f:97:19:cb:e3:d2:3b:9e:24:
                    2f:12:89:9d:36:2c:ed:1f:a0:82:79:22:b0:62:24:
                    7d:bc:12:f3:ff:2d:a3:bd:8b:93:55:c2:6f:fe:bd:
                    1b:67:20:ac:ab:a2:a8:a8:9e:c6:07:1a:53:0b:d3:
                    41:10:04:9e:59:d2:14:37:61:4f:d3:35:79:93:39:
                    94:ef:e4:9d:2f:64:a1:2e:d2:da:a6:78:08:f7:47:
                    99:78:55:19:90:3a:5e:f6:e8:a6:4f:b5:e3:d3:3c:
                    ce:70:7f:5d:14:9a:0a:4a:30:8e:d3:df:8f:be:2a:
                    31:2f:d6:a5:3a:f1:75:cc:3c:f5:47:7b:7f:33:be:
                    31:6f:c1:74:f0:6a:e5:6f:11:be:cd:fa:cb:db:11:
                    df:91:c3:05:3d:f6:48:d5:7e:2b:57:eb:04:87:da:
                    18:cb:67:75:45:fa:61:1d:bc:b2:2c:b6:46:08:59:
                    87:4d:f4:0e:fe:05:95:43:83:fa:04:2b:94:9d:c7:
                    64:5c:a4:a1:67:2b:20:8c:d7:2a:3b:7d:ae:af:de:
                    48:32:98:6e:b0:99:06:35:ac:c0:27:2b:f3:5d:d4:
                    a0:97:57:7c:a7:58:92:2f:b8:c8:a8:39:c4:7a:aa:
                    a4:46:d0:ab:b5:ee:7e:d6:f0:59:30:60:07:a3:f9:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:59:A2:0B:21:77:F0:2C:6E:43:C6:D1:DD:5A:8B:C2:A2:55:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:50:7e:98:96:51:c0:cf:7e:2c:36:2d:c5:33:13:98:5d:
         a4:be:15:08:6b:ad:3c:07:34:ac:91:a8:23:f3:10:81:5c:48:
         2b:85:48:2d:af:51:a5:c2:04:52:6a:09:10:08:43:fa:98:1e:
         2d:6b:83:9c:b1:e4:89:4e:69:cb:b7:74:1b:f0:ec:e3:ea:27:
         0d:1d:dd:9e:80:d9:d6:28:4b:e9:4f:c4:cb:35:e2:aa:a5:60:
         73:c2:b5:17:4a:0f:95:78:89:43:09:48:d6:d9:06:ac:b4:5b:
         16:32:a4:8c:69:c2:30:60:a0:61:f7:b9:18:5c:11:bc:95:ff:
         02:6f:7f:5e:bf:45:7f:31:6e:90:56:80:2e:d3:36:50:3e:19:
         83:28:bf:66:14:22:f8:8e:7e:d2:65:dc:2e:79:bf:8a:33:fb:
         71:e0:49:3a:86:d4:4b:d8:00:31:ec:a1:40:02:31:90:96:c0:
         85:ff:8e:27:73:c3:55:29:5e:b6:32:57:86:6a:c6:b7:93:42:
         83:cc:99:04:91:40:4e:eb:6a:a2:e6:3f:43:15:92:15:9f:77:
         31:c9:f0:3b:8b:b9:69:af:36:6f:14:8d:23:e0:a5:3d:27:97:
         75:2d:68:f3:11:5f:8d:40:43:87:68:c5:04:95:aa:61:94:21:
         df:83:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:47:06 2025 by rpki-client