Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14e3f18-28b8-3830-80c0-7c3a24e71f0a.roa
File:                     d14e3f18-28b8-3830-80c0-7c3a24e71f0a.roa (raw, json)
Hash identifier:          0vq58LfEJ9SVP9Wqmbvl+BUCJFMnc1aqN4NMX1X2VQc=
Subject key identifier:   C8:3C:8D:8A:1A:61:6A:EA:AB:82:A3:72:0B:9C:E3:1C:97:6C:32:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295583A2BA8500F9D5363D70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14e3f18-28b8-3830-80c0-7c3a24e71f0a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1015:b0c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:83:a2:ba:85:00:f9:d5:36:3d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=8a827641-f35b-4a92-a2cb-1e92cb4d1206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:18:54:ce:bf:ff:42:d6:49:09:d5:48:e3:
                    bc:ff:3a:4b:80:d0:a1:9a:4b:2f:7f:51:c3:ce:9a:
                    57:91:55:bd:b5:2b:6e:2b:79:8a:cb:6d:c7:d6:01:
                    4c:fb:4a:d5:c7:85:ee:13:74:88:2a:09:19:d8:5d:
                    ab:0c:3f:16:0f:fb:26:90:50:7c:7d:47:8c:08:c8:
                    00:a0:ac:c6:dd:50:c4:3f:0b:8c:bc:35:db:00:e0:
                    b2:11:d5:03:18:ca:30:91:b7:63:8f:e9:67:ab:5e:
                    e7:42:a1:5c:b5:65:50:8b:e4:63:74:45:7e:46:51:
                    44:54:7d:b9:87:20:89:7c:b7:cd:45:21:88:ae:49:
                    ec:9a:ea:a7:c3:00:b6:9c:23:28:82:aa:08:a4:e7:
                    58:9e:1a:e7:33:75:ad:f4:6e:a3:c6:73:23:41:55:
                    4d:6f:ff:73:c8:c1:d3:2f:11:68:a9:d9:e2:5d:ae:
                    54:36:3e:ec:49:6b:1d:b3:f1:f2:09:57:12:4b:c4:
                    24:74:1c:55:7c:90:01:b4:ff:11:3a:4b:1e:c0:ed:
                    44:75:e2:a0:41:ca:56:2e:7f:9c:52:2e:d8:71:e0:
                    62:69:ff:b8:13:2f:4d:da:6e:eb:56:54:e4:54:f5:
                    8a:0a:73:2d:c2:fe:8d:5d:0c:07:5d:40:c8:a7:32:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:8D:8A:1A:61:6A:EA:AB:82:A3:72:0B:9C:E3:1C:97:6C:32:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14e3f18-28b8-3830-80c0-7c3a24e71f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b0c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b7:66:3c:ca:79:6f:1b:8c:cd:88:28:31:9d:99:5e:88:d8:
         71:ec:16:5b:76:05:aa:4c:28:a3:3f:6c:19:b3:b6:a2:f3:c0:
         08:58:57:7d:46:14:34:11:45:91:a5:d0:fe:fd:3c:b4:3e:8a:
         a6:d2:91:c4:e1:2e:8e:43:d4:e7:6b:8a:30:23:d0:02:88:14:
         16:c4:84:6e:dc:d3:bd:6d:20:1a:9a:e9:38:61:01:77:d5:ed:
         a9:7e:b3:20:e6:7f:fc:56:6a:89:9a:02:8c:84:b9:29:84:9b:
         c0:e2:7a:96:03:87:b2:fa:45:22:83:a7:a8:20:91:7f:71:d6:
         7c:60:7b:bf:cb:75:0d:ec:f0:68:80:1b:57:82:28:d0:8c:63:
         bf:bb:61:8f:8d:8e:c8:45:46:10:90:7c:5d:0f:84:45:5b:bf:
         5f:54:a9:20:f0:49:a3:99:58:ae:de:18:91:00:8b:55:86:27:
         38:68:ef:68:2d:3f:e6:6a:4c:4e:da:dd:a2:b0:ca:a6:1c:85:
         4e:a4:aa:52:1f:6e:c8:67:39:50:90:91:7c:3b:19:a2:0a:dd:
         de:db:6b:19:0b:9c:43:55:40:66:e7:23:21:93:9e:29:cf:46:
         4d:05:f3:ad:9d:de:0b:cd:3b:1a:2e:f2:93:a7:aa:db:5a:53:
         8a:6b:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:56:56 2025 by rpki-client