Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9371a52c-8946-3b04-95a1-1b5c226c0e6b.roa
File:                     9371a52c-8946-3b04-95a1-1b5c226c0e6b.roa (raw, json)
Hash identifier:          /R3qNWC4h8vWsq/MNgegNbmUwA3lXrH0+a3FQC+ZPjc=
Subject key identifier:   0C:93:28:20:1F:1D:2B:16:AC:43:86:A7:EC:7F:D0:53:6E:D4:FA:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF7171785CA8E5A066880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9371a52c-8946-3b04-95a1-1b5c226c0e6b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2607:f160::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f7:17:17:85:ca:8e:5a:06:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0bb1ee1a-2bfb-40c0-9147-9ddde1069a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:17:4b:a5:cb:2c:12:64:ab:cb:db:b5:18:
                    43:f1:56:84:2b:89:dd:6b:46:ac:49:dd:22:d2:2f:
                    70:73:09:14:89:5c:f9:50:48:8d:77:11:71:57:8c:
                    19:b0:63:71:6e:68:a0:36:fc:34:fc:1f:03:e4:2f:
                    d9:f1:ea:84:68:52:d8:f2:14:a7:bc:5d:fb:1e:9b:
                    3e:5f:d9:d5:7e:d6:36:1f:73:47:6e:01:b9:84:e8:
                    6a:ab:76:10:88:7a:da:51:33:48:68:86:04:7c:02:
                    e3:f6:f7:6e:ff:d7:1d:f9:bd:20:ba:75:33:75:1e:
                    92:ca:76:91:de:0c:35:09:ae:e3:54:10:11:d1:ad:
                    ba:68:75:15:a8:fd:56:48:e7:08:e7:15:02:12:c0:
                    0f:27:ba:80:00:e0:b5:b6:cf:f4:cb:57:f2:eb:42:
                    ea:04:c1:21:f6:71:c9:f0:07:2a:70:bc:ff:53:1c:
                    e9:69:c1:14:c1:85:23:ed:66:6d:79:ca:5d:e8:ac:
                    74:79:6b:76:c5:4a:5f:52:56:f6:bb:4f:42:b3:36:
                    8a:14:3b:b4:58:4c:90:84:31:27:1f:67:6a:79:bb:
                    7c:21:64:56:71:ab:64:8e:4f:0c:c0:96:58:ac:c9:
                    30:ef:87:86:a7:df:f6:40:36:54:4d:94:71:83:99:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:28:20:1F:1D:2B:16:AC:43:86:A7:EC:7F:D0:53:6E:D4:FA:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9371a52c-8946-3b04-95a1-1b5c226c0e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:09:31:ae:ff:d6:39:0b:58:75:c2:e0:08:02:c1:3d:38:
         a7:44:8f:f5:98:bb:3d:e8:fa:e7:67:0d:06:8f:87:73:72:1b:
         0a:d2:98:ab:3d:7d:d1:8c:a4:cb:64:f5:89:cd:72:98:bd:17:
         4f:de:bf:a5:d6:e1:1e:31:92:2c:fd:f0:d2:dc:4c:f9:06:1d:
         6c:8a:36:38:2e:a4:a2:9c:36:0b:75:a0:ea:43:fc:0b:d0:b1:
         1d:72:47:38:9a:2d:4f:30:42:da:89:9d:be:5e:b3:c5:17:18:
         b1:9e:06:61:51:6b:7f:d4:53:90:30:0f:74:0a:14:ef:46:a8:
         5d:e1:8f:58:50:06:9a:19:a7:3b:e5:17:d5:67:36:26:28:28:
         b4:ed:cc:2d:a5:bf:5e:06:75:d5:e9:40:53:02:e2:b7:7e:07:
         5a:c0:b5:05:22:28:06:79:0d:e1:58:76:2f:3b:49:88:cd:fe:
         07:6d:51:22:f1:06:83:ea:8d:33:68:86:f2:9b:db:b0:df:37:
         da:61:a1:fc:38:15:20:61:6c:3d:28:55:0f:5b:64:87:ca:b5:
         fb:64:44:c7:7d:25:ff:cd:36:f4:1c:2c:6e:8d:ca:db:60:e4:
         15:ac:fe:e7:44:ae:82:e7:22:c2:a9:ae:25:46:34:88:f7:c5:
         3e:7d:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:04:54 2025 by rpki-client