Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa
File:                     ee0f62e0-27ab-3382-8730-753c2715240b.roa (raw, json)
Hash identifier:          GdSJVEdtosb/MCdie61iiv8YN+ZooGK2rLfoONndo5k=
Subject key identifier:   69:DA:BC:E8:E7:20:BE:79:2C:55:19:28:3B:C1:11:30:9C:0A:D3:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1F5F777296A452821700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1007:d020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1f:5f:77:72:96:a4:52:82:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=1a597789-d982-4224-a0d6-2eb82b45c26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:ec:26:7f:29:41:3a:b6:d3:07:a5:9a:e8:
                    8f:dc:4a:d1:e3:da:34:a5:f9:f7:41:e3:9e:1d:2b:
                    dd:fd:fe:7b:79:2c:a8:0f:a5:f5:b9:c5:b7:4c:36:
                    8f:c2:0b:ba:ad:6f:76:84:c4:69:f3:8f:44:cb:33:
                    14:ef:ff:6d:46:88:f5:79:b6:a9:90:e7:1c:fb:46:
                    97:df:cb:30:45:d9:29:e5:4e:e9:62:94:9d:d8:3a:
                    ab:71:30:85:7c:fb:b9:68:4c:ac:04:89:da:18:ee:
                    27:75:5e:80:d6:70:19:32:53:67:16:c8:53:4c:82:
                    c9:fd:a7:dc:28:75:4d:25:44:e2:44:5b:c4:c6:fb:
                    a4:3b:18:8d:02:cd:11:72:33:a7:54:78:6a:87:63:
                    a2:ce:a4:3f:41:cb:f4:4e:9f:1a:52:0a:ad:dc:65:
                    34:25:6f:80:d7:91:b8:1a:b1:a7:38:08:cc:ef:99:
                    1d:ab:80:9c:d2:a3:50:47:ce:40:3d:09:31:2b:f7:
                    7f:c2:7a:4f:6f:77:e4:42:fb:1a:fe:85:03:95:60:
                    34:6c:ec:1b:52:7d:46:ec:14:06:61:34:97:cb:a9:
                    18:07:d0:7a:b5:b7:e2:f1:2d:ba:83:33:de:f0:9e:
                    92:e0:e6:1f:43:11:9a:6c:b6:71:8c:37:87:b6:33:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:BC:E8:E7:20:BE:79:2C:55:19:28:3B:C1:11:30:9C:0A:D3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:05:22:c3:24:fd:95:cc:b6:d4:3c:40:90:50:e9:41:ce:05:
         2e:0b:ae:a6:41:7d:b8:ca:25:95:c4:7d:da:4b:1b:b0:cb:98:
         ae:bb:13:df:d5:e9:34:f2:9e:f6:7c:f6:3d:20:3b:3a:2d:51:
         37:33:f8:24:75:30:0a:18:28:71:cc:ff:1a:5e:c1:d9:cc:97:
         34:0e:5c:bf:68:6b:d8:2f:87:73:ae:77:b0:b3:5f:a6:fe:c4:
         b1:f3:fb:c3:41:13:dc:d3:82:a8:a5:41:44:81:65:4c:be:5c:
         d7:bf:2c:c6:fa:50:8b:4a:06:ef:09:dc:ac:79:45:64:de:94:
         71:25:3e:08:d3:11:d5:c4:b0:80:00:45:92:14:cf:80:ef:80:
         71:0d:51:0f:f4:cc:25:55:ab:8b:98:74:d7:75:07:e6:95:f1:
         00:67:95:c6:cd:0f:b2:50:a7:85:71:bc:99:50:43:58:13:e1:
         f6:14:c2:ee:2d:ef:aa:b0:a5:0b:9a:da:41:a5:eb:65:84:3c:
         98:8b:d0:f5:96:c2:18:fd:1e:c7:f3:d4:31:a7:98:2b:60:42:
         39:72:b3:1b:89:cc:b3:33:da:d4:95:cb:75:e9:50:40:bc:c4:
         4a:49:cc:8e:bb:07:fb:52:18:5a:0f:0a:f9:9d:01:f1:2b:67:
         55:d5:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:30:07 2025 by rpki-client