Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fb0e3c-29f9-3a70-a371-0e4cda6cc36e.roa
File:                     a6fb0e3c-29f9-3a70-a371-0e4cda6cc36e.roa (raw, json)
Hash identifier:          915I2s+RKvUsDBuJRxFHRQD+mxyUynZahSLC45Fa3yk=
Subject key identifier:   FC:0A:8A:F8:16:BF:49:BA:D8:61:DE:DC:07:FF:69:F4:A4:01:64:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4CAD2D3B80067BF24100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fb0e3c-29f9-3a70-a371-0e4cda6cc36e.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b290::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4c:ad:2d:3b:80:06:7b:f2:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=c9df04fe-3800-4049-aa4f-81b7b869071a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:a1:f8:a9:10:6e:af:bb:7c:8b:17:40:08:
                    e0:3e:e2:05:1c:4b:1f:88:5c:f6:2d:3c:5c:ff:33:
                    f8:c2:e8:5e:e4:9a:4b:14:e9:8a:a3:2d:56:f4:0b:
                    66:98:67:72:18:85:35:6c:15:7a:a1:38:64:77:c5:
                    7c:f9:1a:b6:d0:8d:5a:e6:15:d2:81:96:0e:40:19:
                    11:71:87:f7:77:85:a6:a5:00:6b:60:41:55:04:aa:
                    f8:b6:40:fe:29:24:e9:84:66:14:37:dc:1d:8f:4c:
                    05:b2:47:c5:4e:a7:d0:bd:2c:71:b2:e8:6d:4c:45:
                    d3:36:5c:2e:49:2d:84:c8:f5:85:fd:f9:fa:ee:d3:
                    96:e1:2d:9b:8d:c1:32:d3:5e:24:69:17:1d:3f:01:
                    79:8b:cf:1f:63:eb:2e:a4:8d:44:64:6e:57:4b:a6:
                    58:6a:1c:fc:7b:ce:2d:ab:e8:c5:15:41:9e:30:54:
                    ba:d6:b0:d2:c6:6a:68:d1:66:26:dd:0b:46:f4:fb:
                    67:47:3e:68:de:b7:be:10:ea:cd:d1:1c:69:cb:ed:
                    6e:c2:bb:db:49:1c:9b:84:cf:ca:4e:c9:5a:af:99:
                    e5:57:02:bf:a3:3e:87:02:47:0e:7f:53:f8:6b:e1:
                    f5:9d:dc:ac:c5:af:60:0a:ab:83:44:7c:2a:90:e3:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:8A:F8:16:BF:49:BA:D8:61:DE:DC:07:FF:69:F4:A4:01:64:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fb0e3c-29f9-3a70-a371-0e4cda6cc36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b290::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:85:a1:f2:3c:f9:0d:77:cf:ee:96:2c:cf:1a:34:ca:5c:c6:
         c6:ec:32:a5:4a:84:91:86:f0:73:c4:fd:33:01:1b:54:4b:61:
         23:5d:20:b3:60:96:26:84:43:64:ee:9d:cf:3c:08:8e:2c:61:
         fb:88:03:a1:f2:4c:f3:70:f9:9e:23:03:5c:31:c3:cb:c7:25:
         07:0d:7d:48:2e:8d:92:fd:c1:82:c3:fa:b1:9a:6f:52:50:b7:
         7b:38:11:41:e5:1c:cd:84:1d:f9:a8:0b:8d:7e:a5:66:44:a2:
         ae:0d:8c:f7:51:13:c0:db:a8:c6:9a:d6:ba:32:24:7b:2d:b0:
         47:e2:69:07:be:2c:92:a5:3f:68:73:72:da:b9:9d:e1:5c:98:
         c8:49:f5:e5:d2:6e:32:cc:51:2d:5e:91:51:ef:fd:9b:2c:b7:
         fa:b2:1d:b0:d0:d3:4a:af:db:81:f0:f7:ff:89:af:b8:67:4a:
         ac:7d:45:ce:58:f8:ed:d9:c3:c9:56:25:b0:ab:64:8e:c6:e2:
         81:c9:0a:0c:1d:0d:e2:dd:9a:95:e9:93:ba:6c:31:5f:fb:8f:
         8e:c5:9f:1e:ce:b4:00:60:6a:de:85:43:06:ee:ca:c7:49:40:
         2c:ba:c7:1c:19:49:e9:c8:e3:87:d8:e9:2d:91:46:10:70:95:
         c3:2c:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:29:58 2025 by rpki-client