Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
File:                     4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa (raw, json)
Hash identifier:          0rEgkPzaI/+s3sylpBVt8bBRHZMvK3541Ou8R6cA28k=
Subject key identifier:   D7:E4:C9:F3:29:89:0E:6E:2B:74:B5:47:E4:44:CB:D9:CE:A1:F9:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB4121C06E940F65B61ACF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1012:b230::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:21:c0:6e:94:0f:65:b6:1a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=f20c78e7-038e-40de-a32d-3ecffaf2444a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:6b:0f:d1:99:66:d7:87:4f:1a:46:33:6b:
                    3c:fe:52:6b:fd:3d:4d:91:e1:5b:1a:a1:94:7e:df:
                    10:04:6f:e6:6f:fb:0b:5e:c8:30:4a:d6:6f:ca:0e:
                    85:cb:69:86:cb:28:e5:be:5a:8f:ae:d6:2d:f2:56:
                    38:26:cf:b3:0a:b1:89:96:6c:d6:ff:93:b8:e3:b4:
                    27:68:32:cf:fa:cf:90:76:9d:1e:18:a8:df:69:28:
                    32:42:fc:5e:4f:96:1c:81:70:d4:be:b6:09:9f:43:
                    6b:ff:e7:52:6b:cf:31:5c:2d:1e:cd:89:20:4a:d4:
                    b6:c5:95:6b:3b:58:80:b1:bf:ef:ad:b9:ce:37:4f:
                    8c:8b:99:94:f5:90:30:f2:35:d7:7a:75:a9:85:a2:
                    64:d9:c8:67:78:ad:0e:c3:e1:1a:59:4f:e5:8a:3f:
                    e5:0b:61:ae:c9:c6:bf:1d:b3:10:8a:4c:93:bb:ae:
                    9e:4f:bd:f6:88:3d:cf:b0:b6:28:de:34:fe:5a:f2:
                    7f:7d:25:dc:be:80:2c:11:6c:2a:92:da:0a:dc:f6:
                    17:98:e4:60:46:ad:bc:f0:0f:d2:5c:4c:8f:5b:b6:
                    f9:49:4f:19:f2:05:78:91:b7:27:11:b8:44:00:09:
                    6b:c4:58:2a:6d:92:27:29:35:2e:c7:4e:10:9f:23:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E4:C9:F3:29:89:0E:6E:2B:74:B5:47:E4:44:CB:D9:CE:A1:F9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b230::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:40:fa:1b:a6:70:f4:02:ca:a4:56:e3:2c:ce:fe:26:2b:
         5c:5b:b1:6f:0c:f5:91:a8:e4:e1:32:36:28:c3:b9:8b:f8:b0:
         69:1c:64:9c:c2:54:ff:d9:9f:22:fb:b0:58:bb:11:9f:17:7b:
         e5:c6:85:98:09:96:c0:a3:f9:29:59:a8:1a:a6:40:33:51:a7:
         2a:5b:fe:bd:bd:2d:67:0c:13:4a:92:c4:f0:eb:3d:35:d1:28:
         48:19:b5:67:22:08:3a:e1:83:90:18:66:e8:45:24:1c:ba:82:
         dd:39:f1:2a:45:37:ca:ad:39:2b:4b:86:55:a9:67:0f:c6:93:
         39:20:d3:34:9b:00:28:64:d2:8d:9d:1d:0d:4d:52:7e:10:4e:
         8d:52:5a:15:4a:40:de:6d:b1:ec:e8:7a:91:48:be:5d:51:e4:
         5a:9a:05:76:61:8a:d2:b1:00:8f:c6:37:d3:52:4e:fb:fa:4f:
         33:65:e9:a8:97:37:be:f5:f6:10:e1:46:1f:76:b4:f9:ab:70:
         12:99:86:4f:85:75:19:22:9e:2c:af:5f:cf:8e:2c:fa:82:cb:
         55:1a:55:f5:4f:70:b5:9a:fd:c5:21:04:cf:39:b4:74:d2:21:
         75:28:22:85:7b:98:68:9c:32:5d:46:98:3d:5a:96:a6:63:d5:
         e4:1e:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:40 2025 by rpki-client