Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa
File:                     c1c66a84-c669-31df-bdb0-d17767bac3de.roa (raw, json)
Hash identifier:          YOgpy8ijXLFPLitZGUqm3x8g4c7K3VZQJsLbsTaUuS4=
Subject key identifier:   54:39:E7:0F:65:BC:C4:4A:96:CE:1D:6F:5F:43:9A:CD:31:37:7B:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B46BD2309C06A69800600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b13a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:46:bd:23:09:c0:6a:69:80:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=2c14b5c6-0ba2-45d4-944a-dd685b8e0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:c0:ca:d7:6a:8b:a9:4e:dd:34:b1:0a:d1:
                    7b:fc:1b:bd:8b:71:41:b2:4f:6f:37:a8:f4:a5:fe:
                    1c:a7:70:23:c7:8e:7f:4e:78:72:c0:27:07:60:18:
                    af:fa:94:bd:e2:33:bc:04:8c:ae:49:12:1e:68:4f:
                    ea:1e:17:84:3f:37:60:a4:41:e5:54:d0:d5:27:ca:
                    28:a7:6e:6a:42:e7:9e:f7:21:5a:a4:cb:57:5a:7f:
                    58:9a:f5:30:85:59:66:32:0c:e4:c0:ec:2c:10:41:
                    96:81:1c:5e:60:cc:b0:15:30:ad:e6:5d:1c:0b:58:
                    7e:fb:10:92:27:19:e8:2c:80:5f:f3:10:62:30:9b:
                    a8:1c:6a:50:49:94:2b:af:c2:ac:4d:24:2b:d5:0c:
                    12:36:b0:46:49:23:74:80:fa:12:76:8d:a0:ec:9b:
                    ea:a4:f8:81:20:57:db:47:04:50:7e:fd:7d:ee:82:
                    fc:f4:de:de:92:4d:62:cb:af:d6:b1:14:c3:67:c5:
                    94:c1:58:75:48:7c:2e:b2:66:0e:c1:7f:81:70:b0:
                    9b:cc:8d:ef:47:f8:bc:98:11:f2:57:97:af:7f:6b:
                    0e:fa:3d:e5:ad:65:cb:2d:20:98:85:f8:8a:b6:2b:
                    e7:e0:56:5b:57:40:64:dc:c0:4b:19:d8:8c:9d:79:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:39:E7:0F:65:BC:C4:4A:96:CE:1D:6F:5F:43:9A:CD:31:37:7B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b13a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:08:0d:a2:0b:30:8e:69:c1:6e:9b:b6:fe:6f:20:f4:76:c7:
         cf:0c:3e:00:a5:dc:c9:06:81:c6:5f:50:13:41:a7:43:03:fe:
         a6:9d:b9:a4:4d:36:12:0c:b7:70:94:a2:28:6a:f3:d7:ba:03:
         b8:a0:07:68:d1:8b:86:d1:61:1f:6d:b8:01:d6:9c:33:5c:7a:
         86:09:c3:4f:90:ff:a4:ca:3e:fc:4f:e4:fe:fa:15:02:47:23:
         72:eb:6c:1b:b5:23:50:6f:aa:7a:ee:5c:58:4e:cc:fe:79:31:
         fb:d5:ce:7d:22:3d:ee:bc:d3:f3:ce:2b:9b:15:da:02:a1:49:
         e2:a4:43:cb:b6:5b:b5:82:74:73:83:e3:c9:21:0a:fb:4b:84:
         7a:9f:11:f4:37:60:00:c7:94:21:ad:19:7b:40:2f:ea:36:a5:
         57:ab:c6:72:7d:b9:4c:d8:8c:b2:6a:54:04:cf:99:7e:2f:a2:
         03:78:15:a8:4e:36:dc:6f:cb:3b:41:39:90:0e:59:7d:d1:2d:
         7b:54:ee:b7:1e:b2:db:76:c2:d5:8d:48:5f:9a:2b:e3:f4:a5:
         54:52:c9:33:04:e4:be:dc:57:77:a3:7d:0c:ba:4a:68:ce:f7:
         39:65:be:4a:d9:d6:7c:13:7a:56:b7:66:b3:32:3a:15:c8:1a:
         3a:22:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:10 2025 by rpki-client