Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d91eafe4-f179-338e-a852-5abcaf1d17e9.roa
File:                     d91eafe4-f179-338e-a852-5abcaf1d17e9.roa (raw, json)
Hash identifier:          38JAXF9Tti+faDaQq8jMMNczlxzRbK3mDnkefiZgAiQ=
Subject key identifier:   7E:87:52:31:F5:91:AC:B1:7C:8A:55:B2:11:F1:34:36:3F:91:4F:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1AD27D9917270CCDCD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d91eafe4-f179-338e-a852-5abcaf1d17e9.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1006:a132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1a:d2:7d:99:17:27:0c:cd:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=2850d6b6-1072-4ad7-9348-54ea0592052b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:f5:a6:b3:e0:9c:df:6a:b2:3f:62:42:de:
                    09:86:c9:a6:b0:ee:84:7b:5e:4f:d0:6f:7e:4a:18:
                    2b:ab:8f:9c:cd:61:ff:ac:af:f2:46:76:b0:bb:3e:
                    62:91:96:5c:d0:55:e9:c9:2d:a8:e2:81:fa:4f:a5:
                    b2:ad:7a:a8:a9:76:a7:e7:07:52:63:89:9a:15:cd:
                    17:16:f6:0a:7e:ae:ab:7d:7b:02:9c:d4:b9:7a:5b:
                    e1:4b:10:8c:77:f9:bf:62:b0:9a:02:e2:40:f9:25:
                    bc:f8:7e:17:ab:f4:06:53:1b:ec:94:61:26:e0:26:
                    ef:88:b1:75:30:47:fd:16:da:78:48:fc:f2:58:20:
                    fc:44:f1:15:e4:0c:78:92:28:24:d4:8e:94:e8:0f:
                    24:7a:fa:cf:be:9f:20:71:27:64:1d:bc:5f:19:09:
                    f5:76:a4:58:38:37:65:a6:2f:cf:6a:8b:f9:b6:a0:
                    be:ea:6f:ab:5e:c3:f7:66:36:4a:0d:1d:8f:3b:d8:
                    f1:2b:37:30:7b:0d:73:2c:a4:f4:f6:e8:ca:5f:27:
                    16:bf:6d:c1:0c:3b:38:d9:1a:3e:6c:03:9b:ab:23:
                    16:62:c6:16:c3:22:2f:cf:3b:14:f0:9a:31:6a:7e:
                    09:0a:10:5d:c9:b1:2d:fd:d8:c7:55:0f:d8:c1:30:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:87:52:31:F5:91:AC:B1:7C:8A:55:B2:11:F1:34:36:3F:91:4F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d91eafe4-f179-338e-a852-5abcaf1d17e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3a:19:e2:48:57:2a:c0:e9:12:78:9e:52:c7:13:42:bf:31:
         45:a4:93:05:e3:4f:42:53:28:00:3b:32:87:da:a3:40:7a:95:
         4e:49:30:d2:c8:12:b2:f5:6b:28:ce:8e:9d:5b:d5:1a:d7:8a:
         a0:18:38:b7:2e:54:4a:a3:ef:65:5e:5a:55:d7:a8:f1:fa:11:
         9e:d9:0c:1d:b2:6b:95:8f:66:52:00:0d:18:52:73:17:48:7b:
         9e:fb:01:d4:f4:cd:34:8b:3a:9a:88:63:0c:51:8e:29:ad:19:
         ec:28:5c:2d:bb:e9:9f:f0:8c:c4:8b:32:7b:06:63:fd:1e:ec:
         28:52:5d:96:13:fb:92:54:56:25:84:3a:bc:07:0b:59:4e:da:
         84:cc:f3:7c:f4:f8:29:7c:8a:a3:b6:c8:86:c8:7b:50:13:e4:
         59:67:9c:22:50:fa:75:d1:a2:76:ae:ba:19:c3:aa:b2:6a:2e:
         b2:5d:4e:58:fb:79:20:fe:03:3c:6b:86:3f:ac:f3:40:4e:a0:
         37:f4:c0:d7:57:95:e3:1b:40:3e:8f:33:b2:76:f1:69:6f:fd:
         34:42:dc:b5:4a:19:4a:a9:2f:4e:25:dd:d9:47:9a:8a:2f:10:
         31:82:b4:1d:20:eb:27:29:0c:0b:0a:cd:41:fd:46:8e:70:d7:
         07:ac:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:49 2025 by rpki-client