Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b1388d-50e4-321d-a50e-64cf9b048d3f.roa
File:                     57b1388d-50e4-321d-a50e-64cf9b048d3f.roa (raw, json)
Hash identifier:          5eUyZBmVMuImXq9Hw3gLhPhXUssjBuG0D4YTbsDObUA=
Subject key identifier:   F4:82:A2:4C:AA:3D:90:9D:3F:FA:CB:B8:F3:54:12:6D:D7:92:3E:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4CC956F5E49158FC2DE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b1388d-50e4-321d-a50e-64cf9b048d3f.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b2a8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4c:c9:56:f5:e4:91:58:fc:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7ca939df-7d10-48fe-8c33-0d02a5dc4406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:ca:8a:16:c7:73:3c:02:90:29:cb:bb:3e:
                    ab:77:72:b8:82:1e:9d:7b:3a:ad:49:ed:a2:7b:37:
                    c5:2f:65:04:c6:77:73:f3:fb:b3:64:03:66:a8:3b:
                    2b:05:9f:f8:99:fd:2a:06:60:fe:3a:a6:ed:23:d9:
                    73:a5:5c:5d:ba:cf:93:8c:87:a5:81:79:4d:77:c7:
                    e1:b5:02:01:82:d0:72:fc:03:14:d4:db:73:99:ed:
                    17:c0:10:a8:5d:f3:04:a9:36:0a:5a:1a:5c:16:d7:
                    4d:a6:ab:bd:f0:9e:d4:3f:86:da:49:3c:d2:8f:9b:
                    fc:ed:79:35:86:a2:3c:92:0f:fb:93:c9:71:19:47:
                    2d:8f:2b:d0:6b:46:29:e4:a3:7a:fc:df:ec:5d:e2:
                    80:06:6f:d6:4c:c2:28:40:69:98:51:8d:e4:33:df:
                    20:d0:8f:be:48:ce:bd:bf:13:8f:ab:d0:f1:c3:bb:
                    19:09:21:c7:33:9b:a7:7c:3e:7b:17:5e:ff:cb:cf:
                    bf:7a:8f:b4:74:64:c9:a2:53:10:a0:f4:ae:d7:99:
                    e3:f6:be:27:a6:aa:7e:d0:49:fb:f4:f6:ac:b1:13:
                    82:a2:2f:86:e2:89:63:d2:1e:b4:70:2e:af:46:0e:
                    77:a4:d9:e0:50:80:da:a1:db:57:ec:6a:a6:95:c9:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:A2:4C:AA:3D:90:9D:3F:FA:CB:B8:F3:54:12:6D:D7:92:3E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b1388d-50e4-321d-a50e-64cf9b048d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b2a8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:d8:19:f2:63:4f:e8:e2:ab:67:ca:fd:b7:41:00:73:ff:
         2f:16:d5:f6:bb:e8:c9:a4:30:5f:28:3c:b3:d4:00:df:f5:a6:
         6a:b9:e9:a3:b9:a5:24:a6:da:d8:e6:88:12:ae:d8:bf:b3:5f:
         e8:cb:e6:d6:97:1e:2e:e6:bd:5e:f6:e0:34:94:e9:67:5d:f8:
         51:2b:49:2b:a1:60:44:a2:a8:f1:ca:e4:84:9d:2e:2c:36:c9:
         8e:bc:87:85:8a:69:d2:03:2a:4a:4c:e3:68:47:84:c1:25:3a:
         ad:29:4f:bf:62:cd:4c:43:43:30:9e:59:41:f2:25:27:b3:e1:
         51:f6:1a:39:e3:30:60:5c:50:db:f4:fa:71:0e:a7:82:45:38:
         d1:fd:b6:ba:0d:f1:cc:ce:5c:bb:b0:c0:50:77:e5:e6:28:ec:
         2c:28:da:40:56:92:23:b7:7d:18:3e:cd:b9:08:2d:50:b1:57:
         3d:70:ea:b7:90:21:ae:19:38:40:08:8e:1c:cf:6e:7e:fd:c3:
         26:76:c1:8c:b0:6d:5a:85:f3:e8:1b:d0:da:82:94:aa:2c:a5:
         bf:31:70:b7:03:b8:40:96:a5:6b:a7:b0:2f:d8:4f:b6:31:ab:
         33:2d:57:58:4e:f3:71:01:00:fd:28:f9:6a:36:01:87:9c:07:
         f5:c7:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:49:54 2025 by rpki-client