Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7e720b8-9ff3-3cd1-ad3e-39c33943606b.roa
File:                     c7e720b8-9ff3-3cd1-ad3e-39c33943606b.roa (raw, json)
Hash identifier:          6EFTYGgBsqtPWNJHatGtMy3RATsoHgXrHO4jfMFONZ8=
Subject key identifier:   48:09:3B:C5:9C:20:DF:A7:58:C5:F0:74:20:17:7D:CD:A2:BC:EE:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A4CF2B5B3C7A4BE886B7C8CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7e720b8-9ff3-3cd1-ad3e-39c33943606b.roa
Signing time:             Tue 24 Jun 2025 19:11:14 +0000
ROA not before:           Tue 24 Jun 2025 19:11:14 +0000
ROA not after:            Mon 22 Sep 2025 19:11:14 +0000
asID:                     6167
IP address blocks:        2600:1000:a120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:f2:b5:b3:c7:a4:be:88:6b:7c:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 24 19:11:14 2025 GMT
            Not After : Sep 22 19:11:14 2025 GMT
        Subject: CN=ed795841-dd0f-4fa7-8b1d-e83050c95b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:59:9c:5b:d7:ce:09:91:a1:a4:d1:10:3b:
                    88:e4:5a:ab:d6:51:4d:39:fb:2c:eb:85:ce:85:75:
                    a3:58:fd:9e:25:1a:ac:bb:e0:64:99:e8:2f:b2:5e:
                    f4:05:da:a1:04:20:b3:b1:73:86:ad:32:f6:5d:62:
                    09:0d:bb:f4:55:35:29:29:76:f6:9f:3a:c7:df:2d:
                    a1:a8:4f:cf:1d:0e:3f:dd:01:d4:f9:ce:c6:9f:13:
                    b1:b8:12:7f:ce:24:2f:34:b4:c5:f7:be:66:72:17:
                    a5:43:3f:62:d6:86:11:3f:37:71:24:d7:6c:7a:d4:
                    9f:29:2b:e6:07:0a:bf:39:a8:6f:cb:7f:b7:5c:bb:
                    c5:7b:77:60:4c:2d:f5:6c:47:2f:42:c0:9e:f1:ff:
                    63:3b:71:b2:5a:90:6a:6e:49:ee:dc:3f:c9:6d:72:
                    b7:67:84:4b:8a:9c:c3:24:e5:93:fa:83:89:6b:2d:
                    55:07:8e:96:c8:53:f2:3a:a0:cd:e0:11:5e:71:0e:
                    84:9b:71:b4:53:f7:bb:27:d4:81:7a:20:d9:87:4e:
                    a8:ac:b9:3f:d2:57:ee:cd:47:73:53:1d:58:1b:ab:
                    c3:5c:00:ff:c5:59:eb:51:6f:cd:54:29:99:cf:2c:
                    f9:26:e6:b0:7c:2e:9b:c0:4e:3d:15:8e:24:49:c1:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:3B:C5:9C:20:DF:A7:58:C5:F0:74:20:17:7D:CD:A2:BC:EE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7e720b8-9ff3-3cd1-ad3e-39c33943606b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:b1:b0:2e:32:0d:ff:04:40:7d:e1:c3:79:84:28:09:4e:
         eb:ae:b1:42:bb:f4:d6:6b:3f:73:8a:19:09:0e:67:2f:ce:a5:
         79:ab:41:22:f6:54:9a:20:03:31:d8:11:4f:bf:07:3b:e5:89:
         40:50:99:77:44:88:cd:ec:83:b0:10:c9:f3:56:d6:c1:e6:11:
         fb:d8:57:dd:4d:94:99:bc:d9:5a:f4:df:38:56:f1:b8:dc:7a:
         a3:bf:30:af:20:97:25:9b:b8:6b:9a:5d:66:01:a1:9b:2f:3f:
         ba:ec:4c:c6:61:26:54:f1:9c:e8:92:19:03:a3:5e:6c:f2:81:
         37:40:f5:f2:b7:70:d6:5a:ac:bc:0c:1e:66:b8:a5:ed:3f:be:
         8a:95:ff:ac:50:43:0f:b1:00:27:b0:52:f5:92:cf:ca:84:8f:
         97:ac:97:85:26:66:5c:30:df:b9:db:aa:ca:22:e0:ee:21:a0:
         d7:b6:77:80:ed:9c:dc:66:88:5c:64:92:02:36:ca:ab:d7:44:
         fc:71:a7:72:e8:ce:9b:ed:4d:0d:11:5d:9e:fe:63:8d:43:d2:
         fc:83:f3:bf:db:ba:00:1b:fd:23:47:e7:66:04:a0:0e:22:1e:
         3e:77:a1:79:88:85:7b:79:9d:dc:e7:fb:e1:ca:d7:8c:a1:30:
         0f:2b:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:10:08 2025 by rpki-client