Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
File:                     3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa (raw, json)
Hash identifier:          cfdV6OhmR+0igONPqA03McQzCRM0aPF7MVLsHJF45Q0=
Subject key identifier:   20:06:31:C8:B3:D0:E4:65:29:35:D3:4A:4E:78:9C:C1:60:F7:D1:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295578E4A719F57857EA93E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1014:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:78:e4:a7:19:f5:78:57:ea:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=92cec4f4-b9a7-433c-9de6-2921a9d1397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:98:d1:d3:58:1f:9d:e8:76:51:64:eb:57:
                    99:bc:0d:85:77:2a:03:97:7c:47:5c:b5:81:2a:fe:
                    8a:2c:2b:9e:31:78:7f:8b:28:74:cd:49:ba:14:25:
                    dc:5d:b8:28:15:2d:ed:69:29:ba:83:dd:e5:62:90:
                    65:09:41:30:21:c0:6e:b3:64:19:46:c1:f9:d8:9d:
                    50:4d:a7:66:78:75:56:87:a6:f1:ec:d9:aa:f5:9a:
                    5e:f9:42:ac:2e:12:60:96:51:36:53:d5:8d:38:61:
                    fe:c5:a9:15:26:db:ff:d9:b4:bc:84:1d:3c:a7:e3:
                    fe:5d:4b:76:bf:c5:64:2e:0f:9e:9c:4d:27:56:e9:
                    9f:c2:04:6d:13:8a:17:6b:ea:43:63:6a:d1:a6:0a:
                    4d:e5:a1:78:7d:3b:1a:79:30:cb:35:1e:42:03:60:
                    89:78:43:71:10:3d:34:84:77:2d:18:42:bc:a3:b5:
                    23:21:82:db:4a:2f:f5:14:cf:15:c5:6a:e4:29:f5:
                    f1:62:62:da:35:d1:aa:04:8e:d9:e3:88:3d:d4:cd:
                    23:de:4b:5c:91:44:4d:0c:bb:7b:6b:0f:7c:46:35:
                    b1:ff:67:d7:a2:df:db:9d:03:9f:af:28:b0:53:72:
                    55:db:f9:f9:5d:69:47:b5:5d:fc:50:f3:db:ec:6b:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:31:C8:B3:D0:E4:65:29:35:D3:4A:4E:78:9C:C1:60:F7:D1:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:6c:77:a3:7e:b7:8e:42:bd:3e:5c:86:df:3d:74:65:8d:
         06:9a:6b:cb:0c:9f:19:99:24:74:04:9e:b6:74:fe:0e:cb:35:
         69:ed:c3:d4:2b:15:24:5d:24:6a:ab:2d:db:3d:2b:6a:54:68:
         a9:74:8d:a3:d3:b6:b9:b5:a0:c2:ff:4c:5e:76:26:b7:f8:8f:
         6a:94:6f:ec:b8:6f:f7:91:9c:38:7b:ca:3d:01:48:0e:2e:52:
         6b:5c:93:50:ac:bc:43:d6:bb:97:f5:10:d0:4d:18:cd:7e:07:
         9a:d9:b3:df:cc:8e:5e:40:44:3d:f9:48:21:eb:05:b6:4f:3a:
         ff:f0:65:0a:37:12:ed:cf:b6:b5:d3:44:e7:5a:d0:83:09:0e:
         a7:50:26:39:e7:e8:e5:60:b5:a8:c7:23:84:cc:0f:8d:88:3e:
         51:e8:f1:84:28:4d:07:ec:6b:5c:4f:8c:03:9f:4e:d5:02:cc:
         d4:9a:32:08:1a:1c:bc:6d:3f:6a:cf:1e:ff:b2:bd:76:fb:1b:
         da:bb:e2:9a:52:c4:6a:42:0a:42:f2:e0:38:7a:e7:7e:d5:3b:
         44:ed:43:c9:df:22:9a:9b:18:75:ae:f5:51:6c:33:59:42:ae:
         ae:96:1c:2e:c3:b6:18:f2:24:af:41:e2:cb:ba:1f:eb:c9:a2:
         a0:f4:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:31:05 2025 by rpki-client