Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
File:                     a414a711-0dfd-3eff-a9ae-62813658b1ee.roa (raw, json)
Hash identifier:          9MZ7ZIYC+yNJQ+0Yz0E//cRJVE82yVTfY7RhoZt7F1M=
Subject key identifier:   AD:18:CA:91:3C:34:A9:7A:70:A0:D0:E4:BF:C0:CF:6B:36:63:FB:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4CF6E852C43A34C38E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4c:f6:e8:52:c4:3a:34:c3:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=ace3e9c8-d7b2-4074-8349-50a8252bebc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:04:b4:6c:7a:51:e9:a8:4a:2c:91:4f:39:
                    fc:9e:c1:c4:33:68:08:d6:fd:d7:99:8e:a0:38:3a:
                    c6:80:db:81:cb:7c:f6:36:b4:67:6f:9d:e7:6f:6c:
                    7e:89:74:12:aa:62:e7:eb:1d:c2:ca:1e:9f:31:20:
                    f3:59:ab:4d:35:50:ee:93:36:b1:2b:97:00:9f:3f:
                    3a:fe:67:f3:e5:19:42:aa:2e:37:e2:e2:66:f9:a4:
                    c8:6c:58:82:79:be:fa:16:6e:3d:40:f7:74:99:f1:
                    4e:dc:8a:7a:0d:b9:4f:db:35:f2:da:0c:f4:9a:56:
                    d8:fd:d2:f1:39:fb:3a:c0:6f:74:54:b2:88:38:57:
                    57:3d:65:dd:e4:d9:a6:af:7d:ca:22:6f:1f:c3:17:
                    55:8d:c8:35:1b:cc:4b:0a:b0:d3:8c:f9:7b:cd:96:
                    cb:53:37:8f:20:42:41:1c:48:f8:39:55:56:b4:2a:
                    49:cf:5c:bc:56:bd:25:2b:2c:ad:3b:19:92:8b:0a:
                    57:1f:54:df:60:e4:10:37:a5:ff:43:e5:54:2c:f9:
                    3f:a8:60:65:c7:dc:b3:c5:de:45:6b:e7:4a:ca:47:
                    f0:f6:ba:3b:b9:c1:9a:da:7b:70:74:5e:bb:52:b3:
                    87:c2:bd:be:33:98:d7:72:b0:48:f3:57:cc:9e:57:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:CA:91:3C:34:A9:7A:70:A0:D0:E4:BF:C0:CF:6B:36:63:FB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:2b:30:f5:dc:a7:e8:c2:82:0e:8b:45:a4:95:28:eb:97:
         3d:22:d1:94:5e:17:e8:55:37:97:37:1a:ca:84:7b:9e:a7:e3:
         f5:7a:ac:c2:fd:02:34:bc:2d:9d:1c:f5:e5:0a:de:db:c8:cf:
         d3:e0:6e:aa:80:ec:a6:3d:9c:16:d5:2d:6b:a8:a7:8b:91:a1:
         66:dc:42:52:f7:81:89:a4:6a:fb:7f:85:35:d9:ae:1a:5c:98:
         df:11:80:08:44:d0:55:76:d8:59:c2:e6:9a:4f:77:f7:6d:9b:
         a2:12:e5:5a:71:3d:c5:64:cd:49:67:cf:22:ec:fe:5c:01:9e:
         5a:ff:66:58:d6:86:03:86:c6:8b:d7:e5:8f:d6:d2:89:53:44:
         44:e5:b0:59:c6:15:d2:fb:35:3d:42:88:97:d4:18:a8:15:2a:
         38:65:c1:bf:3f:a4:35:ad:bd:88:40:38:98:23:36:70:d0:5b:
         8a:02:35:e3:dc:34:8a:bc:19:21:8e:57:28:87:1e:9d:0e:cc:
         12:cd:86:f2:3c:73:90:8b:00:6f:70:a5:1c:b3:18:ec:33:44:
         5d:36:7d:44:63:ce:f7:d7:81:e3:a7:80:51:8b:db:d8:aa:8c:
         e8:eb:27:c9:0b:c7:bf:f7:66:c5:e3:ff:7f:a7:c4:94:fd:31:
         98:e2:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:32 2025 by rpki-client