Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa
File:                     5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa (raw, json)
Hash identifier:          iZn+6CagkN6BSmmfcbtmGLGC6erYvsGOeJOiftemS7g=
Subject key identifier:   BA:AB:DA:B9:5F:E9:16:94:19:34:68:8F:1A:D4:F0:F4:37:AB:76:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B49468AACA2CBBCAA9A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1003:b870::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:49:46:8a:ac:a2:cb:bc:aa:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=953e5b67-74ab-4e0e-bb51-0eb23d6afdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:f6:d8:79:84:0d:b4:19:67:42:a7:6a:bc:
                    a0:22:d0:71:53:93:50:96:7f:e4:bb:bb:6e:05:09:
                    95:5a:2d:24:f6:3f:4b:60:cf:4a:93:5c:37:2b:8d:
                    41:03:cc:f6:60:67:d1:e2:1f:50:1e:f0:af:1a:86:
                    bb:e9:de:dd:d6:78:83:c3:06:eb:cf:a6:a9:7d:c8:
                    00:f7:f9:d3:33:13:5d:d9:ad:a9:91:80:27:ba:33:
                    7a:61:8c:bf:19:fd:79:46:c7:3c:1b:50:fa:4a:38:
                    32:b3:b0:bd:02:3a:3c:28:84:97:5a:82:60:03:96:
                    76:c9:98:63:e4:ff:d7:1b:7d:1b:7a:4c:70:df:3c:
                    72:4a:f0:bd:dd:c4:5b:3d:c1:08:a7:1b:64:0e:e6:
                    2a:0f:b3:f4:64:45:29:bb:e5:72:ac:f9:80:cb:51:
                    1a:5d:9e:e1:81:bd:3e:51:84:6e:28:d4:23:87:d2:
                    bb:d8:59:c1:07:fd:bb:86:66:07:45:1c:6c:21:e5:
                    a8:0b:ef:9f:52:e0:90:05:95:17:d4:b1:95:54:de:
                    b6:a3:9d:fa:18:61:8a:35:20:a5:b5:e1:ae:2e:09:
                    94:32:0d:c5:9b:40:78:c2:be:ec:a0:52:07:a3:51:
                    0a:99:19:50:69:d0:78:77:f1:f9:11:ec:ca:fe:f1:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:DA:B9:5F:E9:16:94:19:34:68:8F:1A:D4:F0:F4:37:AB:76:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a10fa91-9d0e-339a-bce0-cfbc0c93b0ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e9:83:11:2d:cc:4c:8a:4b:0a:83:af:c9:3d:9c:b0:aa:f5:
         02:31:0d:f4:6e:9c:89:78:31:a6:a7:c5:4b:90:1f:f3:d0:af:
         89:0b:45:78:1b:aa:0c:5d:bc:58:df:56:f6:66:3d:14:a0:57:
         31:12:93:f7:e0:c4:5a:95:ca:28:2f:9c:4f:73:50:3c:22:8b:
         d8:6b:91:c1:6e:02:7c:0c:7f:ca:a1:64:fa:2c:3f:58:6e:ab:
         af:20:0d:46:dd:61:62:7c:22:72:ab:27:9a:2c:29:2a:24:23:
         b4:38:60:23:09:08:dd:6c:19:ba:bc:e2:18:65:71:7d:2e:5d:
         87:aa:e7:8d:84:1a:3a:1b:19:07:80:5a:f5:1b:12:96:d4:45:
         33:10:18:05:97:e8:63:5e:45:1b:4a:66:0f:ce:89:25:44:59:
         8d:86:b1:8e:7b:6b:90:86:05:bf:a3:cd:c4:f0:6a:10:67:79:
         34:16:e9:be:b0:0e:1f:3e:24:b9:e0:e0:50:33:4a:21:6a:fd:
         a8:da:76:0f:59:a0:f4:9c:99:0d:d7:61:74:27:df:e1:13:9d:
         1b:06:e1:c5:a9:37:64:85:9b:55:fc:73:40:94:00:3c:22:35:
         d2:ed:2c:14:f8:cf:55:93:94:2a:11:c8:8b:fb:75:59:cc:22:
         65:33:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:37:10 2025 by rpki-client