Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cbf9e85-7ca7-3eda-9bfc-bdb74aa7409a.roa
File:                     3cbf9e85-7ca7-3eda-9bfc-bdb74aa7409a.roa (raw, json)
Hash identifier:          ajGABAFAQDGs1/qcD6WRrO5hrTPq9MRAK0QmccSkOHA=
Subject key identifier:   E9:A9:20:71:34:6B:00:4B:65:55:32:88:42:B5:68:AD:1E:B6:E2:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29558347261F5E07F0B1CD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cbf9e85-7ca7-3eda-9bfc-bdb74aa7409a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1015:b070::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:83:47:26:1f:5e:07:f0:b1:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=30462fd7-ff12-4803-bd72-4173330b8e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:29:91:fa:62:04:32:30:53:f0:06:6e:a9:
                    18:e6:9b:01:4a:70:0e:09:10:a5:eb:9f:7b:42:0b:
                    3e:1e:f1:9b:24:b1:54:8e:85:3d:a3:b3:d3:39:28:
                    cf:77:e5:c9:0f:90:75:82:90:64:b8:83:e0:08:ad:
                    a2:10:42:7b:15:05:56:2b:02:e4:28:8b:a0:1f:f6:
                    f4:b2:d9:c1:2a:6d:95:18:3e:cf:b2:71:54:f5:65:
                    e3:58:6d:1e:f1:b3:69:ca:a1:00:8e:e9:a3:1d:19:
                    ef:da:c6:1e:ba:e5:39:f1:98:e8:27:b6:ad:1e:e7:
                    f1:74:ee:13:98:a6:90:5b:b6:01:db:02:ef:9c:04:
                    66:c3:1a:95:9c:6b:d1:aa:d1:d5:98:96:70:ca:25:
                    df:81:f0:af:a5:2d:c6:bd:cc:a1:37:d2:dc:9c:d4:
                    12:50:f6:6b:5f:d5:0b:bf:96:49:80:73:a2:b9:46:
                    8a:61:70:46:2f:45:82:d9:e1:27:b3:4e:f6:97:94:
                    f5:8f:c8:25:34:29:d9:8f:d9:c4:e5:5f:55:67:76:
                    03:71:1a:c0:e5:05:5a:5b:f9:ec:89:55:e2:ec:42:
                    7f:b0:1e:66:ec:d9:cc:cf:6f:0c:88:f9:2b:a4:ac:
                    8d:a0:24:c3:79:60:a6:e6:7f:a9:b3:d0:a5:3d:af:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:20:71:34:6B:00:4B:65:55:32:88:42:B5:68:AD:1E:B6:E2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cbf9e85-7ca7-3eda-9bfc-bdb74aa7409a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b070::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:63:3a:4f:07:60:74:6a:92:70:c8:c6:13:8b:4f:b7:c8:0b:
         b1:28:7a:c2:01:a9:ea:e1:88:47:a8:b4:9a:1d:35:84:d3:5a:
         45:52:83:6a:a7:c1:65:4f:f4:7e:70:74:25:89:87:2a:67:b3:
         f6:e6:95:81:d9:ad:23:b2:2b:f8:b6:0f:e5:de:bc:94:bb:63:
         95:1b:11:07:31:a4:99:46:27:55:f3:58:f8:21:ec:63:3e:68:
         f6:13:96:d2:83:d9:c7:c0:74:9e:32:52:95:46:c1:75:31:81:
         59:e7:f5:17:be:98:aa:e8:9d:ec:5f:2b:5c:6c:88:57:94:ac:
         f1:fb:f4:5e:3f:7f:0b:c8:d5:30:85:c8:a6:a4:ca:e8:12:0b:
         73:e2:37:ec:3d:cc:2c:9b:a7:e2:cc:f0:3c:42:bb:04:78:4e:
         59:81:b2:64:42:fc:64:df:24:ed:87:cb:93:71:7d:58:0b:06:
         ea:08:cd:75:0d:90:40:59:52:ec:1f:78:ec:da:3c:6c:bc:50:
         fc:40:4b:a9:41:81:41:c7:1c:e0:71:41:0e:02:46:68:45:5b:
         f0:52:7d:c5:7a:c5:69:04:71:e7:89:b1:5e:d1:26:49:1c:92:
         23:6d:4d:d8:60:25:48:48:05:b6:60:d6:a8:3d:e7:97:47:a3:
         04:ae:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:22:35 2025 by rpki-client