Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
File:                     ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa (raw, json)
Hash identifier:          l+u74s00qsOI3Xvlw7f2zN9lXq1OF9ZKk+WrjVhp1o4=
Subject key identifier:   E8:65:8D:94:ED:32:FC:6E:B6:58:1D:5F:AE:E9:62:A6:6E:12:1A:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4BDC70BA8F27E2E474F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4b:dc:70:ba:8f:27:e2:e4:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=af147602-7fdd-4f04-bf65-ad58cdf3b03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:e1:5e:4b:d4:8c:46:90:95:61:8b:23:55:
                    ae:f8:c1:da:5f:d0:e3:5a:92:df:66:c7:81:96:ce:
                    5f:96:27:c3:49:55:d0:36:a7:12:6d:26:55:06:83:
                    93:42:8b:25:a7:7f:44:6a:ba:03:5a:a3:ff:ee:bd:
                    3d:cd:5b:73:48:55:b3:99:b4:7e:5e:5e:e0:85:6a:
                    09:49:69:e4:72:14:40:69:d5:08:30:24:10:d7:9c:
                    80:47:93:15:b7:34:c2:e6:5e:80:c1:47:a1:42:13:
                    24:d5:9b:f9:cd:5f:03:6e:60:4a:d7:a3:e4:6e:47:
                    7d:3d:98:7a:94:66:84:f1:42:b8:f7:de:4f:a7:51:
                    a9:10:c6:cd:7e:5a:ce:a7:e7:15:80:dd:25:ad:0b:
                    47:b4:d9:3a:df:98:76:c3:e6:a8:07:48:24:ac:ec:
                    67:9c:01:ec:fc:22:6c:4d:b9:d1:94:60:a0:74:89:
                    8b:af:bf:31:ea:a5:a3:83:fa:d4:d7:62:7f:e9:e0:
                    64:06:ed:e5:d0:cd:8a:32:5a:96:4b:84:41:7e:86:
                    64:08:d3:a9:d6:50:7c:c1:0c:5f:67:4b:11:ad:e7:
                    fb:1e:52:71:43:0f:b9:0f:b6:f2:a2:8a:47:37:dc:
                    51:c8:a7:fe:0f:8e:32:15:aa:72:42:64:80:06:97:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:8D:94:ED:32:FC:6E:B6:58:1D:5F:AE:E9:62:A6:6E:12:1A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:fc:66:2b:8d:c9:1a:f8:76:03:17:16:63:9f:9c:9d:b9:
         ea:54:3f:da:aa:b9:16:1b:bf:d4:cf:cf:d4:13:5e:38:69:1f:
         f8:9b:79:a3:48:fb:f0:a9:47:ad:fc:27:fe:be:28:0c:82:37:
         d6:3f:24:b9:1f:ee:64:a9:f9:f7:d2:a7:f7:aa:bb:00:bc:b3:
         a4:6e:c0:a2:8d:9a:10:ba:6d:39:94:0f:a1:ec:de:0c:55:a6:
         f6:df:b0:23:53:1d:92:99:ba:71:7e:4a:cc:11:c1:d5:cf:b0:
         78:31:b7:9b:fc:01:ee:1e:ce:6a:28:4a:5c:69:84:57:5b:ad:
         ef:0f:ff:ad:27:83:50:bf:e7:21:59:10:89:e8:69:65:6f:1c:
         ec:95:66:6a:b0:03:b4:80:47:d9:78:bb:64:a1:90:a3:50:fe:
         08:47:9c:da:78:15:52:bd:15:48:cb:03:f0:04:06:2c:fb:40:
         33:db:eb:09:90:93:2a:58:66:44:77:07:25:65:fb:ca:8e:f9:
         8a:de:34:a0:ff:23:44:96:a1:a0:55:9d:c5:74:fd:5e:23:2d:
         7e:d8:a4:de:22:93:9b:02:e1:6a:be:b3:92:16:55:cc:b8:6a:
         5a:ad:b6:2c:e9:75:0c:c3:fd:59:45:a6:ca:8e:99:a5:df:13:
         37:80:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:05:19 2025 by rpki-client