Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
File:                     d6ae0673-db51-38d2-9be1-4015979986d1.roa (raw, json)
Hash identifier:          EpBzeLX0DVPHLKqWM6exgmrlmusK7LJiWJs0YuW2cKM=
Subject key identifier:   8E:75:C9:27:7B:47:1A:73:3A:6B:10:5E:69:59:19:78:1E:3D:49:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295577A8128B9D8A10D33100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:a03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:77:a8:12:8b:9d:8a:10:d3:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=247c3a7c-dd12-4236-ab1d-a61af9e2ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:94:5d:04:11:cf:24:ce:b8:da:78:4e:2d:
                    b7:a5:97:5a:a8:a0:a3:0e:92:76:43:ae:10:e2:e4:
                    51:fd:6e:b9:15:02:10:14:5e:ae:06:33:ac:da:a8:
                    a4:05:d0:a2:b3:48:2d:55:ac:22:f3:fd:d9:d7:05:
                    57:bd:04:ae:26:ac:ef:11:df:0c:a3:46:46:9d:38:
                    11:ef:92:2d:1f:d6:c2:64:01:70:ac:af:f7:ad:8b:
                    cb:41:11:55:57:02:da:13:d8:47:89:69:dd:92:6d:
                    c3:41:c7:ae:16:30:32:18:c4:04:30:ce:aa:87:67:
                    45:d8:80:3a:e0:72:f5:93:dc:66:f4:10:d2:cc:37:
                    96:c7:fe:b6:21:c8:03:ea:33:53:e0:6f:70:7b:17:
                    87:8d:c7:29:a5:b0:70:bc:ed:55:06:d8:40:e9:d4:
                    1f:7d:0b:b4:de:12:b8:5d:eb:51:0f:20:f1:8f:2a:
                    88:56:f8:3c:bc:10:08:97:f0:cd:e7:e5:c8:eb:97:
                    06:30:f2:82:ff:91:e6:51:4e:b7:45:37:56:28:11:
                    df:4d:e6:58:92:8b:81:4e:6c:eb:c5:a9:2b:cd:2c:
                    93:24:41:22:0d:45:7d:55:d2:d7:83:08:ba:6d:b1:
                    2a:b8:f5:68:b9:23:25:b2:ec:97:cb:92:08:48:08:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:75:C9:27:7B:47:1A:73:3A:6B:10:5E:69:59:19:78:1E:3D:49:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:eb:8c:55:bf:8a:18:30:4c:00:4f:67:84:f2:a2:6e:bd:
         2d:10:43:65:b7:48:6a:c4:b6:8f:d2:37:eb:2a:b2:99:64:bc:
         d5:13:f6:b1:7c:fd:ed:0c:2b:20:2a:f5:88:62:8a:57:dc:49:
         26:5f:20:0c:a2:57:ea:35:31:88:1b:45:c6:33:02:60:99:4e:
         aa:a8:b9:07:2f:e6:7d:06:60:0b:f6:a3:11:12:40:a8:64:fb:
         fa:e7:d5:4d:2c:d4:dd:32:7e:4c:5a:f8:16:1e:dc:90:ab:14:
         7b:48:b6:05:c0:22:63:fc:5e:67:72:03:8a:a9:8b:1f:11:3f:
         e5:81:97:da:7c:de:14:35:b8:89:f6:97:f8:fb:1c:78:95:3c:
         16:de:a0:06:0a:55:cc:68:e7:4a:01:4a:79:2b:3d:f7:d8:b0:
         a6:e4:ce:ae:09:fe:35:73:03:3e:57:c2:c6:0a:6e:f9:a2:7b:
         e3:2b:c4:66:fe:31:57:2e:2d:d7:88:41:95:ce:b8:6f:28:a7:
         47:71:be:fd:54:b0:fd:82:3f:1e:2b:71:b6:a8:4c:83:1a:d0:
         63:c4:90:75:65:4c:94:f4:35:1b:f4:4e:71:93:f2:eb:f7:54:
         a5:4b:f6:22:16:42:2a:31:d2:99:fc:dc:d9:29:f2:91:41:b9:
         a0:c7:a4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:25 2025 by rpki-client