Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa
File:                     7d8a61c8-17fd-3501-ab48-a63a8b065426.roa (raw, json)
Hash identifier:          N6LcZZkwP31vmHH+ijdiluXw/rCuKTH/PMxQzikY2Kg=
Subject key identifier:   D0:D6:A1:5B:AE:1A:4E:E5:91:3F:0A:40:D1:AF:B2:C7:AB:60:9D:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ADECBDA035EBCB92E9FD8FC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1014:b330::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:da:03:5e:bc:b9:2e:9f:d8:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=7a6b58fa-17de-48a7-8099-571b035d553e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:3d:20:46:a3:63:d1:e0:c0:98:04:0c:f9:
                    ac:ef:5d:eb:db:98:ea:d8:5e:30:a7:3b:97:32:05:
                    9b:e1:44:d1:bf:3c:15:2f:0e:9d:ee:d4:45:88:79:
                    1c:cd:ca:58:25:8c:b8:47:8c:c9:4a:5a:9c:85:95:
                    19:32:19:e6:8b:b6:d8:20:9f:08:2d:f4:7c:e4:8f:
                    c5:7e:ff:ff:59:d0:4d:5a:72:f8:13:70:f3:42:c7:
                    5f:a7:66:ed:b8:08:fc:17:af:27:e9:70:6f:8e:0f:
                    1b:6f:f5:bc:38:16:b4:c9:00:22:6e:63:97:a5:31:
                    a5:98:29:8e:2c:d1:76:06:11:33:8f:1d:ad:7d:94:
                    89:60:b6:4b:6e:7a:92:24:7f:b1:ad:5b:92:81:1a:
                    63:b6:62:4d:88:92:5d:f4:cc:26:fa:14:6a:a9:8d:
                    5f:75:1b:0f:fe:9e:8e:e3:98:4e:0d:1d:85:fb:37:
                    a8:92:82:79:b8:ac:bf:93:95:16:46:a6:a7:7c:45:
                    bf:af:63:6e:a7:78:c2:62:07:7a:4f:3d:28:46:68:
                    43:0b:ef:c1:80:ef:54:66:3a:9f:80:fe:0a:04:86:
                    ba:e9:55:56:81:2d:b9:4b:84:01:4c:0c:64:a1:0d:
                    bb:ab:3a:e1:97:2c:8e:df:51:61:f7:af:13:91:9e:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:A1:5B:AE:1A:4E:E5:91:3F:0A:40:D1:AF:B2:C7:AB:60:9D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b330::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:52:39:57:c2:4f:0a:d5:2f:cc:c9:44:00:d4:78:44:f3:e7:
         ff:86:c6:b2:92:ef:76:d3:29:0e:9c:fb:cd:71:ee:f5:4b:57:
         f8:5a:d7:1b:84:81:f4:1e:9d:3d:cf:54:a3:28:e4:a6:ca:3e:
         86:a9:b6:00:2d:76:61:53:56:59:f6:a8:2c:bf:be:d5:6c:e6:
         dd:9c:ea:16:5c:c0:1f:34:ef:d1:6b:15:68:df:16:d1:dd:64:
         9c:f4:c7:2c:a4:c0:ef:17:75:eb:20:7a:c0:80:20:b4:33:be:
         8a:62:d6:19:34:59:0f:7b:af:b4:25:a5:8f:72:67:3e:7a:21:
         2f:90:47:58:95:fb:a4:18:a5:19:fe:a6:9f:f5:3b:7b:af:f1:
         db:a0:24:b4:71:be:ac:2f:30:18:24:63:e1:aa:35:17:3a:56:
         cd:f0:7b:14:2b:b8:0b:c2:52:c7:ca:af:bb:d7:a4:05:58:68:
         fa:fc:e7:41:a5:fd:13:ae:4b:af:b8:07:29:9a:f4:2c:c2:26:
         ea:aa:a8:58:b4:01:b6:e1:76:62:1f:11:3e:3f:b2:3b:58:87:
         06:b5:d1:e8:23:2b:db:9f:cd:7e:70:80:53:5f:dd:b4:58:90:
         e1:d3:eb:f1:96:0b:5b:5b:8b:9c:9c:7f:da:2f:9e:d0:bf:c6:
         11:ad:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:29 2025 by rpki-client