Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb9fd7a-0826-3caf-87b2-2fdb95d76c83.roa
File:                     ccb9fd7a-0826-3caf-87b2-2fdb95d76c83.roa (raw, json)
Hash identifier:          KxotSIDwC/LcUEyYQzBvzMHD9aHG6/81+J2MC/cSSNU=
Subject key identifier:   2C:CA:34:BF:3E:70:C9:DE:AA:85:37:EE:75:11:C0:20:BC:81:B9:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B18E41107E7144BD1D940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb9fd7a-0826-3caf-87b2-2fdb95d76c83.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1005:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:18:e4:11:07:e7:14:4b:d1:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f00b689a-391b-4bb1-817d-7ec95e28ecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:1d:99:e8:e9:4b:2b:9d:32:a3:67:9f:a8:
                    c6:af:81:51:38:8b:13:3d:a2:a9:cd:22:f2:56:99:
                    5e:ef:66:0f:3f:ae:a5:38:8d:f7:c8:18:bc:35:5e:
                    06:22:85:b6:a6:90:7b:dc:0f:4f:74:f4:c1:93:83:
                    31:1e:19:99:db:54:e8:29:75:7d:a1:18:a6:ef:91:
                    57:eb:9e:0a:d0:9f:ad:af:e6:b8:12:fe:aa:b4:46:
                    75:fd:68:1f:85:cd:70:27:39:72:53:53:eb:05:25:
                    70:93:38:07:57:36:53:3d:04:25:31:8d:7f:d7:82:
                    47:65:99:b4:53:77:83:ee:93:fa:de:83:60:5a:86:
                    7f:11:f7:63:77:36:87:c6:ae:3d:a3:a7:94:57:65:
                    90:59:50:8d:e1:b5:6e:0c:f4:4c:e5:35:2e:95:c6:
                    d6:1e:31:d6:c7:cd:97:81:8c:0c:9f:40:1e:6d:c4:
                    48:f1:03:ca:85:46:99:51:a5:87:1e:54:ce:14:02:
                    2e:40:74:5b:8e:fa:13:62:88:ac:8d:6c:a9:c8:72:
                    fa:d5:04:b7:5c:10:89:f9:be:80:3b:9e:28:93:a1:
                    38:ce:98:34:b6:c1:bd:4d:21:b4:4b:34:c6:3a:66:
                    40:c7:c5:d6:fe:4b:ee:ef:7d:fe:70:ef:39:8e:83:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:34:BF:3E:70:C9:DE:AA:85:37:EE:75:11:C0:20:BC:81:B9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ccb9fd7a-0826-3caf-87b2-2fdb95d76c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:34:96:4e:d1:a4:f6:b4:d1:a7:a0:b1:11:71:9e:06:14:
         7f:15:39:68:c6:bf:0a:bc:90:a1:ed:60:57:36:a0:60:17:e3:
         08:1c:fa:1d:0e:d8:9d:22:9b:4b:66:5c:bf:04:79:1c:a3:5e:
         f8:ab:b0:e8:fa:60:a6:68:f1:8f:b7:9a:08:66:a3:fa:82:89:
         48:a6:a2:a6:3c:9c:b3:17:46:f8:09:8d:25:43:13:01:4d:4b:
         a6:89:e3:49:24:d2:20:06:1d:7a:8a:3a:f7:f0:68:2a:97:40:
         a5:c7:58:01:bd:65:4f:28:2b:9f:59:0f:4d:f1:30:19:af:ed:
         6f:44:49:18:2a:07:6f:63:1e:85:d6:cd:44:30:c2:8f:f1:d9:
         d0:19:4a:0c:49:0b:3d:19:a1:0f:1b:ab:db:68:4b:7b:80:ae:
         94:c9:7f:9c:c1:ef:20:f9:e0:21:aa:6d:45:1c:5e:a1:35:27:
         9e:9b:36:b9:c2:02:66:be:03:ea:5b:dd:46:99:07:9c:76:1e:
         43:8e:a1:d1:a5:97:5c:51:3a:aa:52:1e:8b:42:a5:63:52:2c:
         1b:d3:0c:0a:a9:48:62:e9:86:ee:df:88:50:13:67:37:5e:cb:
         81:c0:43:83:66:21:70:1c:de:c9:40:d7:34:8a:e1:35:70:03:
         01:f9:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:50:46 2025 by rpki-client