Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c63598d6-755f-344a-95b8-a946c07f2082.roa
File:                     c63598d6-755f-344a-95b8-a946c07f2082.roa (raw, json)
Hash identifier:          ZlE5AIstMA1Tamx7sYNS2Ix/Sc0RlhOPRtFvhII0REA=
Subject key identifier:   0B:FE:66:88:89:23:24:CF:11:25:9B:F8:75:20:AD:A4:1B:05:9C:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4D3D5EAFB83696DDF7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c63598d6-755f-344a-95b8-a946c07f2082.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1008:b1e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4d:3d:5e:af:b8:36:96:dd:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=ad11e6df-1ec2-4b55-9000-128d189857c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:a2:7f:b2:82:ab:d1:63:7f:86:f1:7a:8d:
                    e6:62:82:20:71:57:d9:e2:83:3c:9c:63:67:d3:70:
                    e0:0e:7d:4d:4e:15:32:33:09:c8:6f:c1:47:32:a8:
                    bb:15:8d:f6:04:f0:0f:dd:1b:35:f6:4a:7c:d3:60:
                    5a:79:e9:1a:c1:f1:cd:cf:ac:85:23:b5:a9:01:6b:
                    71:98:2f:8d:b6:f3:b1:b4:25:a6:ed:f7:53:73:53:
                    83:00:71:94:04:72:1c:85:16:6f:f1:fd:fc:b5:29:
                    e4:da:05:61:84:d7:fb:12:06:9c:c3:ea:dc:46:cb:
                    70:73:98:4e:75:c2:f6:a8:0b:d9:92:2f:cc:7a:7b:
                    ea:80:26:b9:b2:60:74:05:6b:2b:bb:dc:64:95:3f:
                    9f:1c:3e:ae:f1:d2:3e:bc:3c:95:a9:8b:27:52:4f:
                    84:b3:b5:76:e1:32:04:28:49:ed:5d:65:c4:bd:01:
                    10:1b:4d:6b:3b:36:ae:97:2d:ce:8e:e0:f0:6d:3d:
                    db:70:2b:1a:a2:2b:39:ba:62:5e:30:6c:06:ce:01:
                    4a:51:61:ab:80:9c:93:37:15:ad:9a:b1:e2:9d:47:
                    af:fb:ae:5b:09:c9:e8:70:85:03:81:7e:ad:8b:be:
                    da:93:fc:65:ae:6e:7a:90:a2:91:ae:c9:b9:b2:64:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:66:88:89:23:24:CF:11:25:9B:F8:75:20:AD:A4:1B:05:9C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c63598d6-755f-344a-95b8-a946c07f2082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b1e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:01:ef:9f:8a:69:a1:15:76:47:a4:42:5f:22:ba:47:f3:
         c2:9c:3c:b7:39:78:4a:98:05:fa:6c:2d:7c:bb:f1:bd:59:1b:
         a1:16:29:32:7d:96:26:5c:ed:66:e6:9f:6b:3f:f7:b6:f7:54:
         bc:54:fc:25:5a:2c:83:d1:93:51:59:48:f8:5d:e9:e9:50:81:
         01:ed:e1:61:dd:fa:2d:79:52:5e:f0:af:69:94:1b:42:13:61:
         cf:54:71:42:d2:c0:d8:25:a1:54:0f:b0:09:ad:3d:ae:31:10:
         94:88:eb:e6:e4:84:b9:06:07:96:b2:f8:d6:58:33:94:ac:1c:
         4b:9b:ea:66:2c:b7:57:9f:54:d7:92:d3:98:02:b0:f1:f6:b0:
         7d:47:35:c7:e0:d6:c7:4b:29:c2:90:6d:29:69:b2:25:09:bd:
         c1:03:29:fc:1c:27:72:86:d7:40:9e:4d:77:f7:f1:ad:d1:cc:
         0a:d9:e1:f1:04:cd:77:87:9c:29:aa:fe:22:59:87:64:b4:a1:
         5a:18:86:8d:a6:dc:48:7d:4f:11:1b:dc:95:b4:b8:f8:83:ca:
         0a:cd:5a:e3:d6:00:a7:34:cc:d5:db:a7:56:77:ad:7e:e1:fc:
         0a:73:08:49:e1:c1:5b:10:85:42:d7:07:2a:61:b7:96:a7:f0:
         21:f5:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:58:56 2025 by rpki-client