Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa
File:                     dd9742a9-5480-3c44-88b9-77c978ea7900.roa (raw, json)
Hash identifier:          FqE2l0vf1yqI906iaLy6j49jQPGS9qhT8fmxcIwAqqg=
Subject key identifier:   98:E2:DB:9F:FE:FD:5B:89:12:5B:1B:9D:F1:61:6E:46:83:9A:3E:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B46E90DC8E3970B8A6000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:46:e9:0d:c8:e3:97:0b:8a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=932707c3-0fcc-4f01-b8d4-3ec0f6fef9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4e:51:18:50:e1:0c:a1:39:c1:a7:8d:29:74:
                    f4:07:28:9a:cb:5d:7b:76:ae:77:98:a4:98:45:a0:
                    fe:e5:fa:b1:0c:97:e0:5f:37:2a:ef:60:10:89:47:
                    e0:8f:6a:16:01:66:3e:42:29:e4:b4:f7:81:71:a2:
                    eb:f7:69:ac:80:91:42:05:aa:a2:2b:0f:0e:96:19:
                    b1:8f:88:86:37:13:7c:b8:67:29:37:80:9b:ae:d6:
                    56:47:8d:8f:4d:ac:2d:74:66:76:50:e2:f8:57:16:
                    ce:83:b0:f7:79:6b:6f:d4:a0:61:34:5f:fd:84:9e:
                    06:1d:84:b5:be:f7:eb:b6:ae:92:8a:23:eb:68:12:
                    70:3d:55:fd:d5:12:a2:8d:8b:78:a6:a0:60:ce:9b:
                    db:5f:51:67:59:68:74:e4:2a:b7:c7:c6:75:2f:2e:
                    db:f4:5c:36:37:cf:a5:ac:12:d0:20:44:41:0c:6e:
                    ee:58:64:2a:17:92:b6:84:07:54:12:dd:dd:e7:bb:
                    1f:5b:7d:28:37:00:61:57:f0:e0:8c:cb:0e:ca:fc:
                    b2:a2:b8:fb:e4:ae:15:52:29:64:98:79:81:3a:16:
                    8f:fe:bd:b6:0e:99:7f:09:a9:31:95:ec:44:14:95:
                    18:d0:b7:cf:49:b7:10:e2:67:2a:24:57:8b:42:97:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:DB:9F:FE:FD:5B:89:12:5B:1B:9D:F1:61:6E:46:83:9A:3E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:94:7a:f8:83:3b:e5:13:43:35:c8:ea:80:f8:13:99:8f:
         aa:f6:a0:11:6a:2e:d1:52:56:ca:e6:f7:ae:03:b3:5c:62:ca:
         c0:25:c0:75:ee:84:2d:7b:53:e0:a5:c3:61:95:d5:8c:f2:a4:
         0a:63:66:5f:15:88:ed:ef:1f:ba:e9:e1:ea:e3:2d:9a:f5:4b:
         a3:de:6e:98:ee:81:c5:f0:30:03:a5:dd:78:2b:70:26:d7:d7:
         cb:51:b1:d7:78:1e:7d:5e:be:2e:8c:a3:0c:17:00:5f:80:61:
         d3:66:6d:c6:99:bb:93:e2:65:39:69:16:67:1e:16:17:c9:24:
         e0:fe:c6:39:46:b3:b7:9a:a5:98:40:e9:00:e7:24:ef:cc:a4:
         7c:9a:86:b1:d0:c7:da:43:25:61:c9:fa:76:74:4c:2e:77:bc:
         7c:87:35:99:e5:00:5c:a1:f1:63:18:28:ab:aa:0d:24:68:f3:
         ff:76:31:45:72:cf:07:3a:d0:c8:5e:6f:ed:72:8d:89:23:94:
         20:0d:59:94:29:42:cf:2a:ce:d2:1e:c0:78:79:7f:98:6f:99:
         ad:ab:a8:6a:02:61:8e:bc:bf:65:df:c1:97:11:1a:73:2e:17:
         88:07:64:3d:8c:7c:7c:d6:5a:10:a4:e9:39:25:8f:3b:e5:3d:
         54:19:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:59:04 2025 by rpki-client