Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f2165e-a913-3fd4-8783-28b7d2da650a.roa
File:                     a1f2165e-a913-3fd4-8783-28b7d2da650a.roa (raw, json)
Hash identifier:          a1xGG9fw/05yT8y8z3H5oG7dtNLOGIqWCFqIJQfh7lA=
Subject key identifier:   98:5A:09:F6:3D:32:C0:00:7E:10:B6:09:CC:7A:04:2A:0C:F4:C9:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557A49E843F67916AE68C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f2165e-a913-3fd4-8783-28b7d2da650a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1014:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:7a:49:e8:43:f6:79:16:ae:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=0ddd46e7-f776-4c73-b0c6-c295c452c970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:39:a5:df:b0:e6:65:9e:52:c7:40:1c:76:
                    50:d4:44:6a:d7:7d:92:f5:55:38:d1:f4:a2:99:6b:
                    93:3e:d2:07:06:fe:f5:85:88:15:ec:f9:da:ac:c2:
                    36:1c:f1:e7:da:58:58:2a:ea:09:34:a3:82:fd:0f:
                    fe:57:20:41:85:06:e2:48:f9:af:27:50:a8:c3:6e:
                    1f:15:ea:f2:11:79:b7:e6:45:75:14:af:08:01:ff:
                    0e:65:1f:c2:6e:38:c3:29:f6:a7:5a:f5:d7:12:65:
                    aa:06:bc:01:df:d5:28:7b:72:13:b7:31:bc:05:c4:
                    6c:8c:ca:f0:19:55:55:85:03:5d:53:4d:ae:f1:4b:
                    8b:08:5c:65:61:8b:c1:1e:82:3d:3d:88:1a:d6:21:
                    c0:26:da:43:5c:ca:c7:fb:c2:f3:cc:da:69:16:58:
                    cb:fd:a7:11:6d:b3:89:f6:b4:e0:76:32:7d:cf:05:
                    6b:d6:c6:ec:62:67:35:fe:a6:fc:fb:1c:96:9d:23:
                    80:7a:ea:27:44:48:a4:99:01:97:08:8b:04:a7:7d:
                    81:97:01:f8:ab:f1:39:fc:35:ed:e5:f4:4f:c7:33:
                    17:f0:07:40:32:d9:84:f5:b4:6d:40:27:27:70:50:
                    bf:e6:b2:13:16:d1:81:8d:2d:35:98:fb:ab:4a:7a:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:09:F6:3D:32:C0:00:7E:10:B6:09:CC:7A:04:2A:0C:F4:C9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f2165e-a913-3fd4-8783-28b7d2da650a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:04:aa:d1:2a:8f:3b:53:62:4a:c0:a3:a5:0b:b7:1f:61:
         67:4e:e7:46:eb:0d:78:70:b3:2c:86:28:9d:4f:2b:88:a7:41:
         df:54:19:ae:ec:e1:15:de:ac:79:12:0f:91:9c:3b:09:67:86:
         f9:5f:83:1d:da:17:4e:3e:b6:c4:05:73:fa:e4:ba:22:c3:f7:
         41:95:0d:6d:02:db:db:60:6b:0f:db:3c:37:c7:a6:fe:33:fa:
         fd:f7:1a:0b:dc:14:bb:20:8e:91:87:b0:49:08:d9:8d:ae:59:
         cd:05:5e:df:1a:c4:b4:19:1e:77:1b:2e:26:b0:9a:6a:4f:68:
         d2:c5:e0:56:da:41:eb:65:15:99:a3:5c:8b:75:19:1d:7b:22:
         e3:2e:74:c6:66:da:83:08:c6:22:99:0b:c4:9f:fa:89:aa:d3:
         a6:6c:02:9c:c9:40:43:7c:b6:4e:e8:c9:40:18:5b:a6:7f:a8:
         e9:7f:71:af:78:de:00:9d:c9:bb:c2:55:68:42:36:fa:3e:22:
         91:18:b7:98:b5:f4:be:f1:84:d4:81:b1:94:35:3d:c1:14:6e:
         6f:bc:c0:21:e5:26:c9:ca:91:87:e6:df:b6:af:0f:27:f6:88:
         5c:c2:36:75:27:0d:20:84:1e:14:ed:1f:84:0a:5e:43:51:ae:
         19:a2:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:22:59 2025 by rpki-client