Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa
File:                     6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa (raw, json)
Hash identifier:          f8gQsUzGKhX086EgvTSnghD6S6M6Mw0g+Q2wG1LRpxE=
Subject key identifier:   45:0E:18:3D:28:09:49:52:BD:52:1F:86:53:23:B2:34:C9:11:DC:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1ADEF533451A4C95FF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1006:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1a:de:f5:33:45:1a:4c:95:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=437f26dc-8721-4c71-926f-1bfa7c3088c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:55:c2:08:7d:de:b3:34:11:11:b4:b6:35:
                    7a:de:ba:bd:03:12:fe:b6:b9:91:0b:cc:b3:ea:db:
                    71:cb:6e:80:37:2d:81:4a:44:06:8c:4c:22:a3:61:
                    70:15:8c:0a:96:62:d3:5c:a2:f8:d2:85:17:52:b2:
                    03:c1:42:ed:29:fb:3f:b6:f1:79:4d:91:5a:ab:a0:
                    61:ba:15:bf:60:1f:45:7c:b7:3b:d4:32:5c:56:75:
                    f1:52:e7:d6:7f:1c:1a:02:8d:f4:e2:cc:7d:7e:e5:
                    b1:21:42:36:13:f4:55:28:90:58:c5:2c:97:07:d5:
                    9a:42:94:16:48:b4:9c:da:b7:48:54:48:46:e3:6f:
                    a6:93:0a:74:53:44:90:ed:12:23:40:d1:96:a9:68:
                    6a:81:6e:4f:2f:89:28:90:d8:d1:71:92:25:90:7a:
                    0f:77:73:ae:ae:94:99:2a:29:4b:4a:d7:f6:ba:8c:
                    0d:cf:84:5d:29:e9:79:0e:64:0a:ea:38:d6:c2:1c:
                    2d:14:c9:4f:0a:17:8e:f2:e6:72:92:64:27:77:24:
                    8b:e0:6f:35:4e:1a:03:14:e7:c0:09:ce:9a:ec:e0:
                    ad:cf:b6:0e:f2:a2:b8:e9:71:5c:3d:4c:4b:00:50:
                    1e:4c:9b:62:54:48:cd:29:7f:87:5b:6a:a7:69:d7:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0E:18:3D:28:09:49:52:BD:52:1F:86:53:23:B2:34:C9:11:DC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:66:26:53:72:d2:a9:f1:a1:37:a0:43:53:88:c3:50:47:
         4a:44:c2:93:ab:ff:6b:b2:7e:80:c6:44:c7:80:ff:b9:f9:f1:
         2d:1a:1e:11:82:0d:23:74:0a:0c:39:21:d1:29:10:99:20:01:
         c4:f0:11:e7:92:8c:b3:14:cb:d4:28:c3:42:d6:b0:26:e9:e3:
         58:1d:5a:d0:bf:59:cb:da:73:76:4f:3b:a5:40:ec:a7:9f:6f:
         71:2d:e0:74:64:58:40:83:3a:c1:e6:87:79:0e:a6:75:27:8b:
         46:cc:fa:6e:02:52:b9:bb:f8:50:48:c5:48:a0:a0:84:90:a2:
         31:83:fa:3a:03:2a:8c:de:44:00:30:03:72:cb:0c:48:96:e5:
         c0:f4:bc:f6:26:d0:0b:99:56:e9:b5:bb:fe:38:12:c2:1c:90:
         ca:3b:66:8f:a8:4b:81:58:69:55:4b:6f:0c:dd:6e:cd:1a:ac:
         0e:16:3f:8c:8c:a7:8e:bc:af:5e:b4:c4:a4:e2:73:65:56:30:
         e5:4d:1b:71:5d:55:11:0b:7e:df:ba:b4:9b:ba:2c:95:12:da:
         a2:10:e5:df:82:b4:02:a4:93:f2:17:8f:71:42:77:cd:cd:cd:
         e4:48:01:0a:1c:a3:6d:e4:ac:fd:0c:d8:ac:e4:92:69:a6:84:
         b6:16:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:36 2025 by rpki-client