Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa
File:                     5d4946a2-806a-35c6-ba6d-1439e60015af.roa (raw, json)
Hash identifier:          u88n3bDtodgo4qqs5kfcwyfpZ31z818V7Eh41dTpnsc=
Subject key identifier:   37:41:1E:1B:BD:AE:0D:A9:FE:E1:44:E1:09:8F:A9:06:17:0D:B8:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BD4F3A460422E5ABC720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1009:a123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:bd:4f:3a:46:04:22:e5:ab:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d69d82d1-29a0-46e9-9a9b-fe5059ce6421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:ff:f0:08:52:f5:df:99:a2:9f:2a:94:6b:
                    73:54:d5:78:7d:cd:58:8c:b7:45:71:cd:94:ee:29:
                    48:0a:ed:0b:f5:b4:3b:a1:c5:c7:54:b3:9e:2a:f8:
                    c2:1c:41:2b:40:8d:21:6b:03:1e:53:cb:f9:4d:9e:
                    6b:d9:e9:7c:89:78:bb:8e:35:de:1b:57:f6:04:0c:
                    b4:e3:a3:c3:d6:63:1c:e8:2a:06:0f:c1:12:7e:e8:
                    bc:79:60:ce:9a:11:62:9a:69:1c:87:a3:b3:a2:b9:
                    df:0d:7a:ea:3c:c4:fa:6b:da:f9:0a:ea:f6:67:99:
                    a0:dc:10:10:8e:5a:3f:c1:34:b0:d8:7f:1d:d9:4a:
                    b2:e3:ac:0f:a3:13:bd:3e:9a:79:21:5e:c5:da:3a:
                    ac:d8:0e:08:40:77:71:31:92:98:d8:a5:63:f5:c2:
                    46:81:1d:64:95:cc:f9:11:ce:58:a0:4f:d2:c3:b9:
                    62:7d:33:5c:50:c8:49:d7:eb:b0:2b:7b:84:59:e6:
                    54:2b:df:98:bb:e9:a8:65:ce:c7:63:69:14:23:39:
                    76:32:4d:ee:c2:b7:c0:a2:da:c9:d5:0a:97:0d:4b:
                    cd:2f:d9:21:52:8f:04:71:0a:3d:ff:fe:bd:b4:c2:
                    58:23:59:7e:7b:b8:0f:18:c8:25:ff:6a:ce:2d:45:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:1E:1B:BD:AE:0D:A9:FE:E1:44:E1:09:8F:A9:06:17:0D:B8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:d4:89:c5:6c:61:44:1b:ff:c9:d2:b6:8d:f9:00:e9:29:
         b0:50:34:76:a3:8b:5e:85:9d:13:b2:88:3b:0f:89:c1:7d:5e:
         cd:4b:8d:c9:f5:a8:32:69:d4:de:14:6c:f7:47:42:55:9f:f8:
         ac:71:00:24:d2:95:57:2c:65:d5:7b:bf:c5:9d:df:30:24:dc:
         08:4e:32:67:ab:c6:0c:95:6c:70:e2:83:52:e7:43:b1:8c:70:
         ae:bc:ea:3e:35:9d:bc:76:30:df:ea:d3:f2:4e:55:c5:96:00:
         f9:f1:75:a3:ba:b3:cc:bc:7e:56:b7:e2:00:59:a5:c2:b6:7d:
         21:1e:cd:6a:16:92:93:c5:f5:9d:67:74:bb:5a:e5:46:38:48:
         3e:bf:1a:1f:82:7a:3f:30:66:bc:a6:1a:55:b7:7b:ed:cd:d2:
         dc:74:b1:cd:ef:b1:d0:ab:16:1c:0d:c9:e0:1f:15:84:8a:58:
         09:67:7f:40:d4:e9:d1:c9:3a:b3:00:57:8c:a5:71:0a:73:34:
         1e:dc:4b:58:68:32:71:a2:bb:1b:9a:ab:15:ef:e1:2e:2f:77:
         f8:1b:2b:64:f4:fe:c7:f0:b7:40:8a:97:b6:ca:7e:b7:8f:22:
         31:56:aa:e4:55:9d:e3:f9:90:cc:2e:50:4d:83:48:1c:b3:41:
         a0:30:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:52:43 2025 by rpki-client