Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
File:                     3a290a16-187d-38fb-8970-6b614faeccf1.roa (raw, json)
Hash identifier:          nMDg7KTApBM79jBQXCN2rL2tS/1ewdpCA9uyhc0hOCw=
Subject key identifier:   65:D5:37:53:0A:B7:69:0D:3C:2A:E2:7A:FF:67:66:14:56:69:E7:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B16EF367A96F836386380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1005:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:16:ef:36:7a:96:f8:36:38:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=035bae37-fd7c-46d3-8c41-813f86a025b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:1e:1f:2c:e2:3a:ab:22:a4:83:20:32:5d:
                    e0:70:87:2e:d4:bd:f2:fa:6a:54:42:c7:e0:74:b1:
                    29:02:23:3f:01:97:fc:72:94:b6:ce:c0:e9:38:f2:
                    da:de:07:40:87:62:e7:e5:5d:99:61:95:10:cf:08:
                    48:80:53:82:f1:76:36:22:fd:3f:3e:20:5b:ba:b0:
                    24:5a:17:7c:55:80:ab:06:53:c3:62:9a:ad:50:1f:
                    28:62:c8:8b:d7:08:2c:b5:6d:be:89:ea:1f:8f:77:
                    7a:34:7e:d1:56:63:86:ab:09:aa:bc:3a:23:37:f9:
                    6c:98:f9:96:c8:1c:da:b6:6a:94:2e:3c:a4:7d:45:
                    31:ed:a4:7e:d7:27:76:0f:43:d6:19:99:3e:a9:ba:
                    ba:45:e6:01:bd:fe:c3:4e:aa:7f:a8:8d:d3:00:10:
                    fc:9b:c2:90:3c:1a:b4:e8:63:6e:66:61:89:e8:82:
                    e3:f0:ab:bd:30:73:c7:df:39:2d:75:2d:3c:30:5b:
                    72:fe:bd:f8:a5:47:73:2a:4b:64:65:80:73:06:64:
                    8c:1a:26:aa:ec:be:bb:ce:f0:2b:db:4d:52:f3:4c:
                    46:e2:1b:64:39:4d:1f:97:b3:70:11:26:2a:16:dd:
                    35:b7:8d:13:82:f0:92:d2:dd:93:d7:92:20:af:cf:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:37:53:0A:B7:69:0D:3C:2A:E2:7A:FF:67:66:14:56:69:E7:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:60:57:a0:81:df:13:41:6b:d6:bd:ab:eb:b0:f7:05:a6:
         4b:9e:c6:e0:d4:9d:ee:0b:5e:84:ca:f3:47:86:86:70:a2:c9:
         88:61:e2:ae:b8:79:1a:8e:7b:fd:df:aa:cb:ce:f7:dc:46:e1:
         0b:d7:14:20:c8:4b:5d:d5:4f:67:4e:e2:1a:d3:f4:0a:d1:b2:
         7e:38:e1:22:1c:99:5c:f4:5a:d1:fc:9c:ea:85:67:8a:b0:b7:
         df:87:e3:7d:dc:eb:b0:e6:56:27:d7:83:91:fa:ce:74:40:b8:
         b3:68:69:0b:11:79:b0:c5:b1:1c:d7:4f:36:b0:ff:5c:67:2e:
         c6:d8:c2:d5:cc:b4:d5:5a:2b:66:e5:40:98:3f:3b:24:4b:59:
         a1:1e:7d:7b:ea:e8:db:a6:8c:37:79:a6:3d:be:8f:f5:f9:5f:
         12:f9:d5:fd:ad:0f:29:b5:bf:0c:b9:45:c5:24:4e:9b:86:7a:
         af:04:c4:15:bc:ef:c4:a5:10:0c:50:7d:9f:f7:a8:e0:eb:dc:
         ec:af:fc:a1:38:52:73:aa:fa:fd:51:1c:c1:95:81:8b:44:3f:
         10:7c:e9:d6:b2:f2:7a:40:4e:0c:05:c1:01:2b:a4:b4:38:3d:
         7e:6c:cd:7c:c0:38:71:df:de:85:6b:be:05:2a:d4:ec:45:bc:
         d0:47:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:11 2025 by rpki-client