Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa
File:                     98057d9d-fa6c-3577-84f4-75492024e11c.roa (raw, json)
Hash identifier:          TWq1LpwK/RLka7MeIfUbs9NVFyYBjLUhy18eMBGnXa8=
Subject key identifier:   52:DA:C9:5B:A0:D5:9D:DA:3C:DE:BA:FE:B5:FE:75:2F:2A:92:38:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4A9367A299CD11CB38C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:a130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4a:93:67:a2:99:cd:11:cb:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=619aca19-87d5-4eef-8b59-cd4b06e42f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:4e:0b:20:b7:a3:d7:4b:7d:b8:9f:11:49:
                    08:37:d0:8e:8d:20:bb:3d:dd:53:d2:a4:00:ad:8d:
                    ea:02:b0:60:5f:de:58:06:63:aa:ac:31:17:c0:18:
                    cd:a2:65:bc:fb:b1:90:8f:4a:42:7f:ee:68:1d:ab:
                    cb:e2:22:09:06:04:8f:72:28:c6:6c:48:f1:38:62:
                    d8:0f:53:fe:fa:87:a2:82:26:78:6c:13:90:e6:42:
                    ea:65:b1:44:0f:f4:09:95:6f:74:fe:3e:91:e4:55:
                    b7:f8:c6:5a:a1:bc:8f:4e:9b:d8:64:75:bf:67:a8:
                    eb:9a:76:fe:e4:8f:69:4f:07:23:ff:3a:41:e4:83:
                    3d:51:4c:91:4f:a3:6a:bd:4b:d1:2a:4a:27:a6:4a:
                    63:a6:31:e0:43:a7:65:6c:36:a3:71:89:f7:ea:d5:
                    fd:e6:04:1e:16:2f:a3:53:87:6f:0a:4e:fa:2a:52:
                    67:bb:b5:b1:31:27:bc:40:ac:c3:ff:97:ad:af:55:
                    3f:bd:a5:9c:a5:85:df:f5:17:c0:fc:6d:42:bc:06:
                    52:5c:33:f1:8b:39:c0:51:0e:8e:0e:af:14:9f:61:
                    0a:f6:ec:8c:23:75:7e:81:e5:9e:92:84:80:f7:13:
                    83:51:00:60:6c:5b:dd:eb:d2:42:d4:22:d1:41:54:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DA:C9:5B:A0:D5:9D:DA:3C:DE:BA:FE:B5:FE:75:2F:2A:92:38:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0b:bd:7e:d9:90:75:bf:c4:a2:62:64:86:86:c7:47:fb:cd:
         cb:ea:5b:35:dc:28:47:bf:13:14:2b:73:72:d5:dd:93:a4:cb:
         8e:0d:b1:80:7b:cc:c3:9c:65:7c:45:09:75:7a:60:ef:09:70:
         f7:b6:d5:75:3e:aa:0f:2b:4e:fd:06:26:7d:cc:ac:8a:f8:6b:
         f9:46:03:76:5d:1d:db:8c:f6:2f:bf:c3:9e:14:63:bf:4b:9e:
         73:a6:61:06:a1:58:b6:3a:db:4d:44:97:94:ed:f1:30:e8:8e:
         6d:29:02:4c:8c:e0:7d:8b:8d:fc:06:de:0a:07:f9:e1:5a:40:
         28:c8:c1:e6:c6:1b:e6:e8:5c:b3:23:32:37:dc:6d:58:76:5e:
         6f:0d:38:ef:ac:39:cf:8e:3d:aa:32:58:db:65:79:32:51:d0:
         89:ed:f0:6f:2d:cf:b3:dc:84:7a:f2:fa:fa:86:f3:f7:2d:6d:
         fb:c1:af:3b:07:71:9a:b5:cb:74:c3:0e:48:c0:e1:4c:9e:88:
         4f:ce:ae:5e:b8:e8:b6:4b:69:77:0a:b6:f8:f5:bf:fe:d6:4c:
         99:ba:07:92:b9:f5:55:5c:3c:3a:54:a6:27:3c:7b:c9:4a:a6:
         f9:ac:83:52:e0:d8:20:0c:94:35:20:2f:57:bd:50:59:8f:c9:
         6f:b3:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:40:43 2025 by rpki-client