Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e85ace51-3c5a-3cc2-bd1e-95834f922cea.roa
File:                     e85ace51-3c5a-3cc2-bd1e-95834f922cea.roa (raw, json)
Hash identifier:          OTk8e7WTYd7kFE/SOnh0ntoEjXyHkVkQz7omKj+1KEs=
Subject key identifier:   72:EF:D8:95:90:FC:0B:04:0E:8C:36:0C:EE:1A:28:C3:81:06:5A:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B47849F430386D1553080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e85ace51-3c5a-3cc2-bd1e-95834f922cea.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:f010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:47:84:9f:43:03:86:d1:55:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=1c7db588-79d1-4236-a847-d11338642130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:59:9a:fc:7e:c6:23:c5:74:e4:cc:7d:4a:
                    a9:3d:5a:8f:0f:1d:c2:af:e6:7c:99:44:eb:97:45:
                    c7:0e:17:bc:22:68:d5:e6:b5:e4:d7:66:80:c5:cc:
                    ea:ab:9a:46:65:33:30:8d:b4:d5:c1:01:a2:b1:3b:
                    0b:f1:63:bb:99:3d:3b:24:f0:d7:b5:87:2a:3b:b6:
                    98:e5:59:da:dd:35:71:e2:0d:fb:4c:2c:e3:07:9d:
                    8f:da:83:be:9d:3c:db:28:46:ae:02:6c:05:1e:29:
                    f0:b8:dd:bf:28:1f:8a:29:36:19:e7:0d:cb:62:26:
                    fb:86:56:12:05:d5:43:12:10:12:9a:70:21:78:d0:
                    24:0f:83:01:77:ae:1f:ea:6b:9f:3d:dd:7b:36:2c:
                    71:57:c7:1d:9e:26:e5:5e:78:3a:1c:38:db:a3:80:
                    f0:3a:2f:83:e9:e2:84:6c:c3:d2:0e:ee:04:86:07:
                    6e:0e:52:ca:5e:65:79:3d:bc:c2:4b:ce:c8:29:81:
                    f9:40:af:c4:e6:95:9a:fd:44:75:92:c7:ce:fa:cb:
                    b5:b5:98:4a:c8:c2:0e:46:90:95:de:6e:53:87:04:
                    9a:3e:43:b6:05:f7:62:0a:f6:8b:7b:82:4c:7e:39:
                    b5:30:ef:f3:fe:47:58:8a:33:e8:44:98:47:f9:2b:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:D8:95:90:FC:0B:04:0E:8C:36:0C:EE:1A:28:C3:81:06:5A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e85ace51-3c5a-3cc2-bd1e-95834f922cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:cc:cf:13:c6:8a:a0:5c:9f:ca:71:fb:6d:96:ad:86:d0:
         75:65:7f:0f:4e:6f:31:ef:57:a9:43:a2:f6:ad:6d:93:f6:a7:
         19:34:a2:37:73:04:6b:3b:86:ab:62:9e:c4:18:ef:ad:02:27:
         61:3d:e1:5a:c3:65:3b:79:f9:09:85:8c:c6:7f:67:ba:55:19:
         ba:f5:59:ac:d1:0e:25:cf:36:de:37:b4:91:23:18:00:bc:38:
         c3:84:a8:d8:c2:af:be:2d:43:dd:87:5d:4d:5e:14:18:9a:6b:
         62:59:7a:4f:d4:b6:e8:80:48:38:bb:a8:36:a2:04:62:4f:77:
         ce:4c:1c:57:08:a6:cc:4f:09:51:da:2e:e2:fa:9e:ba:28:f4:
         b7:f9:22:24:1c:d4:17:f2:e0:16:d4:34:fe:63:fd:22:c2:a2:
         06:73:b9:e5:5c:31:4e:4b:79:fc:be:43:f8:df:56:37:49:25:
         11:8f:d2:48:46:83:57:2b:64:dd:55:5a:f4:39:71:2f:62:a4:
         cf:7f:b6:be:9f:f7:33:46:9d:06:53:6f:a0:72:b0:e5:a4:6b:
         d7:c2:ed:7f:b7:44:0b:be:aa:81:0b:01:aa:58:d7:83:dc:4d:
         87:c9:d5:3f:3c:c7:f3:c2:93:99:a2:c5:7a:4b:ec:a0:3f:50:
         13:f3:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:13:56 2025 by rpki-client