Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4730003-9571-3137-b3ae-c43756250f19.roa
File:                     a4730003-9571-3137-b3ae-c43756250f19.roa (raw, json)
Hash identifier:          agnIUIWEEoVoT1/EyIfMzE9459BeT+GgwFxKTJ4YhNU=
Subject key identifier:   CE:A4:14:A8:20:48:20:27:45:0F:30:83:73:7A:DC:BA:C6:89:69:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4CE8CFF8B3D435090480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4730003-9571-3137-b3ae-c43756250f19.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b2c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4c:e8:cf:f8:b3:d4:35:09:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=ea8736db-b3c7-4199-aa04-e30869d855b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:8e:4c:0c:6a:16:89:e7:5c:03:0f:48:b5:
                    2b:fa:a3:dd:00:fa:80:5a:bb:fd:15:a3:80:76:55:
                    6e:61:fc:83:5c:bb:83:96:3f:e7:6d:5d:8a:df:0e:
                    b7:88:5a:c1:80:86:b1:9e:b4:bb:6c:52:48:32:a7:
                    45:e1:fd:e1:a1:ae:93:b6:0a:55:85:ee:d8:98:d6:
                    99:7b:6c:68:65:88:c1:38:ea:bd:9e:53:f2:2f:25:
                    78:76:8d:d2:02:3c:7c:f9:be:8c:94:53:2d:f0:f2:
                    4a:00:76:f4:17:d1:87:64:12:c3:31:4b:61:78:12:
                    71:26:2b:cf:57:17:35:24:dd:ee:03:a2:49:73:56:
                    2b:19:f9:20:eb:74:f3:2b:a7:a8:d8:b9:7f:ad:4c:
                    7b:69:8b:5c:40:26:55:98:12:9a:62:7e:2b:47:29:
                    3f:f4:d4:4e:e6:0f:31:82:8e:a8:5b:6d:80:3b:24:
                    1c:89:b6:79:27:77:fe:58:f0:8c:a3:1f:65:0a:0d:
                    8d:4c:d6:8e:ad:0e:48:b2:a7:6a:53:d5:3d:25:22:
                    60:9b:f7:64:fe:b1:ad:5a:17:5b:c8:07:66:ca:5d:
                    6f:9c:a7:4d:e5:f3:fc:67:e4:fe:ee:79:58:0f:2e:
                    49:f6:2f:16:5a:5a:d4:c8:2c:9b:95:57:b3:fa:17:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A4:14:A8:20:48:20:27:45:0F:30:83:73:7A:DC:BA:C6:89:69:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4730003-9571-3137-b3ae-c43756250f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b2c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b8:8d:66:85:52:e1:99:b6:01:a6:c3:13:23:ab:e1:0f:6c:
         d2:29:f1:82:0e:ff:91:3b:bd:b4:b8:34:5c:89:4a:10:56:0e:
         0b:7c:1e:78:21:f7:81:b2:32:17:9f:64:b9:79:45:f1:56:24:
         bf:7e:9d:ba:a6:b2:85:b3:a5:97:ec:b8:c2:22:c4:f3:84:38:
         a8:73:e6:81:62:d5:a2:2a:25:de:f3:fe:70:76:1b:0b:09:71:
         c4:34:21:22:6d:77:6d:85:8d:83:65:84:2d:b8:93:c9:f8:72:
         5b:94:7a:45:41:be:9d:36:73:8b:eb:2e:8c:a9:d7:74:4f:d0:
         3f:3e:aa:a4:ff:3b:13:5f:09:c7:0c:9a:1d:03:ea:15:0d:89:
         01:92:3d:db:0c:44:3f:08:0e:f1:84:94:e7:cc:46:2a:c0:35:
         44:a7:7d:eb:0a:01:58:fa:e6:e8:49:43:97:da:cb:41:9d:2e:
         37:af:f3:ec:d4:ff:da:9c:6c:d9:dd:6f:d1:b0:f3:f6:72:c5:
         e3:fe:6a:76:53:4d:ce:60:16:f4:9b:90:23:83:ca:40:5b:35:
         15:7b:0c:13:c8:57:57:e3:89:b2:0d:9e:8a:19:1c:a4:e9:3b:
         9e:87:5d:ab:d2:b9:95:bf:b8:62:96:39:75:d7:b9:60:9a:fb:
         7d:3c:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:58:24 2025 by rpki-client