Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c824ef6d-860e-35b7-a0df-05a0dd82b65d.roa
File:                     c824ef6d-860e-35b7-a0df-05a0dd82b65d.roa (raw, json)
Hash identifier:          Vld4KOzDeDiRhC34APeH/Y8tXdVSXEzgol/xOw6mpmM=
Subject key identifier:   88:5F:68:00:86:6F:35:C6:BA:7E:98:53:CC:2D:66:13:99:04:78:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4636259502D8A80E5F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c824ef6d-860e-35b7-a0df-05a0dd82b65d.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b0fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:46:36:25:95:02:d8:a8:0e:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b7d11a29-442e-495e-bab3-fe590d1f7ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:37:1a:e7:fa:ee:f3:4c:9b:5c:c9:67:b9:06:
                    a4:b6:f7:ba:e0:2d:db:57:07:b5:03:e9:40:fe:63:
                    a7:aa:2e:18:02:9e:3d:e9:d2:2b:28:07:17:f5:b0:
                    c8:e0:96:17:27:eb:3a:51:4f:e9:83:29:4f:e5:fc:
                    f4:eb:c8:71:6c:61:89:56:5c:b4:ef:f1:14:d0:ec:
                    50:7f:7b:92:fb:06:d2:dc:41:c1:7c:d9:64:3d:ba:
                    d1:43:61:98:ff:54:f6:aa:dc:6b:bc:e7:7f:1e:a7:
                    2b:89:25:e8:20:0a:66:5d:b1:52:23:e0:c9:74:ff:
                    cd:d6:d0:6b:6e:1e:a8:e0:63:1f:7a:65:dd:f3:b2:
                    8f:ff:98:0f:48:46:4b:76:46:ac:a6:98:78:e7:9f:
                    65:c0:6a:91:9c:79:00:ed:5e:10:2e:df:61:90:e5:
                    3d:ad:72:40:62:bb:6b:ec:43:1d:42:b5:00:18:72:
                    54:38:31:09:60:3d:a4:01:cf:f8:2d:36:18:83:9c:
                    be:a6:90:ca:e4:57:28:4f:d0:c7:c4:a0:f0:8d:22:
                    fa:23:32:72:be:6e:93:95:e8:d9:c9:90:e6:79:02:
                    5a:e8:6d:77:a5:16:df:68:50:9b:08:c5:01:e3:a4:
                    a8:d0:6d:d2:25:5a:00:9c:4f:e8:b3:76:cb:4e:d7:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5F:68:00:86:6F:35:C6:BA:7E:98:53:CC:2D:66:13:99:04:78:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c824ef6d-860e-35b7-a0df-05a0dd82b65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:cf:bc:8d:09:a2:c2:c7:c5:33:2a:85:ba:bc:53:42:b8:
         56:ff:ed:d3:36:46:47:29:27:d4:28:35:3a:6e:88:06:23:3b:
         d7:61:fd:78:d1:bf:70:ee:1e:db:a8:2a:4c:13:17:40:e2:a7:
         a5:8b:9d:ce:1b:f3:7a:7c:bb:a1:e4:a9:d1:35:16:5a:6a:15:
         b3:c2:30:df:04:1d:e7:41:bb:4c:88:d2:05:2d:12:a9:0b:85:
         7f:73:38:21:06:6b:ad:0e:11:c5:66:f8:b6:39:14:a9:9c:e2:
         3d:99:f1:2b:d9:52:b6:a5:31:d5:b9:35:59:50:ee:49:a3:93:
         fb:d7:9c:3d:89:b6:7e:62:15:0a:5b:a0:b3:66:9d:42:dd:ad:
         dc:4c:18:97:de:9b:0e:e9:ae:bb:a4:9f:2e:72:96:da:d3:fe:
         c8:1d:9b:3e:d1:88:00:e5:a5:9f:1e:75:d4:e5:1c:5b:e5:51:
         6d:e4:59:39:04:5f:92:40:80:a2:7c:50:fe:ea:47:9c:79:c5:
         2f:35:2e:14:58:c3:37:93:ca:c7:2c:e2:b7:00:fa:f4:d0:61:
         3b:b6:7a:56:49:ea:df:8f:d3:f3:a2:92:3c:42:39:cc:51:65:
         34:e7:41:65:9c:36:d6:8c:5b:6b:cd:77:69:5b:40:6d:62:df:
         f2:1f:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:25:17 2025 by rpki-client