Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa
File:                     b3512287-3222-3f34-9099-c785776d0216.roa (raw, json)
Hash identifier:          ZKo66u0s/D5I8sYHRcGenfsrRvsT1cHqkRTaof0Hyb0=
Subject key identifier:   24:D1:F8:02:B1:93:BC:AE:B2:26:EE:10:0D:81:F6:24:26:8B:64:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C7C7EE22ADE6D617D500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1000::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c7:c7:ee:22:ad:e6:d6:17:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b33427da-4787-46fe-8ab3-a4cec20d4be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:aa:3e:2d:dc:d1:72:83:cc:8d:de:0f:3d:
                    76:0d:ab:c5:00:ad:1e:1f:7a:c1:4b:3c:8f:b5:a9:
                    c1:5a:81:19:be:72:5b:e8:65:8d:c4:32:8a:16:88:
                    91:e8:5b:63:30:0c:00:27:e0:23:0a:23:4a:42:d3:
                    57:ea:61:3c:14:82:2c:d2:31:1d:54:fa:e7:e4:86:
                    46:f7:3f:bc:68:e4:de:a5:f8:81:8e:63:9a:f7:2b:
                    23:b3:9e:a8:ed:f5:0c:42:23:4f:35:20:43:07:c2:
                    16:f0:62:4c:71:cb:c5:77:30:7d:51:4d:c0:54:a5:
                    61:9b:88:d6:43:b9:e2:23:0e:3e:8b:54:94:60:2b:
                    76:e0:92:f2:36:d8:d7:3f:d6:31:a7:7f:01:9e:53:
                    c3:05:9d:21:ad:f3:59:bb:b4:3c:ef:b3:6d:54:42:
                    20:10:61:03:40:57:88:3e:a7:6c:3c:b8:04:08:6e:
                    8f:5b:62:99:d8:04:06:4b:f1:97:ed:84:5e:af:09:
                    c9:07:e6:41:28:f9:e6:c7:8f:0b:30:66:31:38:5b:
                    55:ef:26:34:cc:3c:c5:b2:f2:5c:2a:c5:5b:3f:3d:
                    f8:8e:a7:60:ef:b4:2c:59:98:cd:64:87:e8:ce:e4:
                    11:cc:ab:49:e4:7b:d7:e1:aa:92:60:44:19:1d:58:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:F8:02:B1:93:BC:AE:B2:26:EE:10:0D:81:F6:24:26:8B:64:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:0d:c3:ee:7c:95:51:70:9c:67:63:c1:b4:7b:e0:06:e6:
         de:46:27:fa:4c:54:73:76:30:cc:c0:fe:0a:bb:bf:29:ce:47:
         25:ed:02:3b:05:79:1f:24:72:f6:38:51:2e:f4:b2:bb:68:ef:
         2a:51:6b:bf:a8:01:aa:82:9e:04:47:a5:e3:57:4d:e1:6c:c8:
         c3:eb:91:8d:a9:94:92:be:8a:fc:0d:f3:33:1b:33:2d:5e:f8:
         f8:fc:15:7e:92:59:02:5f:92:cd:eb:46:81:63:74:85:27:f0:
         27:c9:dd:68:10:77:93:12:fb:71:63:c5:e5:27:5c:69:1d:32:
         74:40:49:ec:e0:01:e6:07:5a:2a:f2:d7:87:0b:03:3b:d4:0d:
         84:d3:ff:7a:73:63:4f:7e:e8:05:af:86:60:5f:2c:05:f1:9f:
         7a:a0:dd:6b:c4:75:3c:11:77:dc:bb:7e:d7:48:5b:b9:8e:db:
         4d:cb:b0:21:ba:09:92:18:b7:51:d2:1c:ee:55:3b:92:58:00:
         d5:88:44:d1:b7:85:2a:ea:16:63:1c:82:27:32:67:54:82:07:
         95:11:9b:1d:44:41:53:b0:fa:89:f4:2c:a2:92:17:67:79:6c:
         eb:d8:b6:29:54:e2:0c:ea:3e:46:de:68:4d:49:55:ee:7f:83:
         e4:7d:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:59:14 2025 by rpki-client