Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa
File:                     38cbcd8f-9955-39d6-9706-5a43875e0af6.roa (raw, json)
Hash identifier:          4i88mmcQSKhNiqTqf0HYP6PoWJei6TpRw8TmA5uKEis=
Subject key identifier:   39:95:3F:59:A4:75:1C:19:9F:43:D7:95:BC:B1:12:5E:6D:3A:69:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1BF6A8006EBAD98C29D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1006:b130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1b:f6:a8:00:6e:ba:d9:8c:29:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=24ec9b85-7184-4be6-96de-468ef670bde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:d2:4e:5d:a2:4a:ed:90:39:2c:2f:5b:aa:
                    1a:66:a3:88:6e:f2:ad:cd:30:6f:ed:5d:31:ac:ee:
                    c1:04:e8:a8:c2:c3:e5:ff:8e:77:10:28:40:08:5e:
                    9f:df:29:5e:bb:28:07:f8:c7:42:a9:c6:bf:a6:21:
                    f6:b1:92:d0:15:66:39:16:33:0e:b5:79:c8:1b:bd:
                    85:f8:d4:aa:90:59:14:16:a7:d0:60:b1:7b:99:b4:
                    58:55:6f:e6:ea:11:1e:ea:7d:37:3d:73:a8:f0:39:
                    b7:2c:12:35:81:d3:c2:aa:5e:f6:0b:dc:59:6c:0f:
                    b0:cb:46:18:36:64:cd:58:12:4f:8e:e8:85:63:66:
                    b8:a9:96:af:84:16:6a:36:ca:a7:ff:0e:ca:17:49:
                    1b:0d:03:be:41:01:4a:0b:a3:37:31:e6:f2:43:38:
                    1d:bc:4a:aa:b9:08:9e:2e:19:19:ac:7c:76:68:be:
                    12:8f:33:d3:e7:37:a7:b3:c8:e4:a8:a8:2b:2d:bf:
                    46:e8:6c:1b:f7:db:be:51:cc:ae:50:ef:9a:79:56:
                    04:46:cf:cd:b3:c6:68:24:1d:fe:a8:f8:5c:3c:2c:
                    d1:3c:6a:f6:86:39:e8:31:71:7e:0c:e7:7b:c5:dd:
                    f3:fb:2c:6b:50:19:62:71:da:85:b1:71:61:e6:a0:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:95:3F:59:A4:75:1C:19:9F:43:D7:95:BC:B1:12:5E:6D:3A:69:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:f9:c6:80:a4:b2:b7:21:87:ee:5d:48:ac:46:c3:f6:05:
         c2:1b:0b:27:f3:8c:2a:0e:c3:46:6c:25:11:b3:da:d3:2a:9f:
         e6:18:27:44:ac:73:73:4a:de:a7:03:6c:0c:9b:19:af:a5:97:
         a8:a3:99:7e:c7:83:ba:bf:91:65:d7:3e:bd:7b:a3:97:8e:97:
         b6:0a:a5:30:bb:e7:9b:c1:23:2b:6e:39:2a:ac:4c:6d:e9:ba:
         8e:aa:70:bb:95:2b:75:9d:56:a7:46:a7:92:11:b0:e1:d8:98:
         2b:72:d7:5e:25:18:32:6f:df:fd:31:22:00:b9:2e:b0:48:cf:
         9a:86:76:90:8b:97:86:c8:2d:04:21:68:d4:29:4d:07:88:a6:
         fb:3f:d4:c1:86:7c:d9:31:38:68:06:8c:62:96:f7:e3:80:26:
         1c:8d:74:d4:ae:21:d4:94:dc:e6:34:82:31:13:34:b3:e5:43:
         f9:55:5b:e5:c3:27:02:ab:f6:e2:8b:91:32:48:4d:12:33:7e:
         42:07:aa:a2:60:ab:87:31:0f:d5:09:18:d3:1c:8b:b3:ae:e5:
         2f:e9:43:c5:51:8a:17:b1:7f:35:23:72:40:9e:01:58:32:fb:
         7e:e5:19:fe:73:b6:d4:38:f4:6d:e8:73:07:92:36:31:6e:0d:
         a1:88:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:02:45 2025 by rpki-client