Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9399626-52ba-3978-b63b-aa84aeb18d6a.roa
File:                     a9399626-52ba-3978-b63b-aa84aeb18d6a.roa (raw, json)
Hash identifier:          YJLu7EbizhZtfGqwGYSC5iYjXuEbvT+Iq0xlOuPnxhQ=
Subject key identifier:   1B:9B:C7:EC:B6:1C:C8:C5:F6:0B:3A:6D:EF:4E:34:B3:22:25:C0:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1FC814DCA831A131BF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9399626-52ba-3978-b63b-aa84aeb18d6a.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1008:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1f:c8:14:dc:a8:31:a1:31:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=8402cb66-4f7a-4037-8274-6e5c9b79478c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:67:e1:74:61:88:23:33:b8:14:3a:1f:c4:
                    19:2d:4b:e3:69:fc:a9:8c:af:7a:2b:3d:0e:cb:5f:
                    64:58:92:b3:3f:87:10:a6:bf:e9:01:61:13:4c:10:
                    49:ab:a4:bb:9a:98:ce:29:c3:ed:92:31:18:c4:c0:
                    9b:7c:69:63:30:42:7a:f5:43:08:91:1a:96:3a:1b:
                    8c:13:0c:b3:35:ae:89:b4:6b:78:0c:77:45:ae:13:
                    fe:4d:5f:88:b9:6e:73:21:42:01:a6:4d:77:cb:18:
                    d7:17:ce:88:03:46:84:b0:60:26:3f:d2:e8:e0:e9:
                    10:a9:53:72:d1:c3:56:7a:48:53:b8:e1:c7:e1:15:
                    3e:2d:df:c3:d2:07:9a:5f:e0:f2:a6:04:39:19:bb:
                    17:22:1d:ba:62:01:9c:59:ad:d8:0b:4e:04:ee:43:
                    3f:b7:1b:e7:5f:f6:74:1b:52:a4:b4:18:0a:db:da:
                    e1:fa:fd:c3:eb:c5:62:ad:14:be:e2:c0:29:87:32:
                    0e:91:e7:f3:3b:67:48:d2:51:8f:6c:6b:c3:98:64:
                    4a:22:fc:71:ab:81:45:02:38:4d:6c:58:ba:4b:96:
                    a5:fe:2f:9b:75:29:01:5c:ee:d7:1b:e2:44:17:89:
                    7c:e5:5b:d2:51:5c:57:75:82:2e:17:6c:1c:22:ac:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9B:C7:EC:B6:1C:C8:C5:F6:0B:3A:6D:EF:4E:34:B3:22:25:C0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9399626-52ba-3978-b63b-aa84aeb18d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:4b:4b:9b:86:3f:6b:21:83:cb:20:4c:4b:35:2e:13:7d:
         64:b9:85:41:d6:db:41:e8:c0:5f:fc:d8:7c:47:f3:ea:2b:b7:
         d1:17:17:08:36:89:63:65:d1:2a:28:51:1d:3a:d1:3a:88:76:
         2f:6f:95:04:ae:f8:42:aa:5b:73:9e:6b:06:3f:eb:6f:b9:79:
         19:b4:af:b8:48:6d:47:96:8d:74:6d:0c:e5:61:e3:4a:7a:4e:
         84:b8:08:0f:64:8b:1a:1a:ed:da:ea:fb:ff:96:c7:c2:c2:b5:
         8f:06:1c:28:85:8c:c6:92:5a:2c:1e:77:37:39:4e:10:cf:21:
         fe:51:d5:e5:83:02:06:13:38:df:ae:3b:4b:69:40:a9:f0:5c:
         81:2a:f7:0d:80:78:2f:3c:d1:42:64:ad:6e:ad:ac:1f:ce:04:
         8a:30:57:96:d8:bf:38:60:bc:fc:fc:f7:66:85:bf:d6:82:f9:
         96:1c:83:28:69:bf:bf:33:98:ef:a4:e0:ee:09:1f:19:d2:96:
         e9:63:32:53:1d:f5:9d:16:2c:35:04:e7:18:98:5d:b9:71:11:
         d8:b0:cf:b1:f5:47:d8:95:db:06:32:0e:de:de:05:25:b9:ed:
         fe:3b:5e:46:86:2e:51:52:24:5d:43:84:f4:2c:58:00:1f:39:
         88:43:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:18:45 2025 by rpki-client