Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
File:                     fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa (raw, json)
Hash identifier:          OWTvNX93eukDvzIep9nnsvpuFCeg7yPyzVOHEkXQW/8=
Subject key identifier:   54:E0:60:CC:28:0F:E5:FF:ED:38:8D:47:A0:0B:2C:E7:F8:02:39:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B15D891100EF0AC962280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1003:a400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:15:d8:91:10:0e:f0:ac:96:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=e93df8df-19db-433b-b834-4f9974fee10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:bf:91:6f:44:ce:01:59:df:ad:d6:cb:b7:
                    98:c5:59:2a:81:ad:9d:f4:2e:41:41:79:c4:92:70:
                    33:28:6e:2d:03:14:2e:02:02:1a:ba:21:7f:b7:a3:
                    c4:8f:e2:09:af:ff:43:8e:c3:13:e9:64:74:2e:71:
                    af:9e:9e:d8:18:1a:5a:cf:b9:9a:02:a9:4c:97:3e:
                    f0:2e:8b:03:1b:b7:b4:14:99:16:63:e9:47:dc:a6:
                    61:a4:c7:a3:11:d3:89:af:a0:e9:33:b4:f1:b7:da:
                    75:f4:2a:5f:bc:d7:ed:bc:2a:40:13:a0:ff:80:c8:
                    47:bf:2a:a7:8a:64:67:1f:47:a7:db:fe:a8:03:ab:
                    31:9f:13:42:00:6c:99:17:85:86:ea:37:0e:05:42:
                    c4:d1:8b:20:e6:32:4b:db:14:8f:50:ae:af:25:cd:
                    a2:4c:7b:e1:47:a8:25:be:32:d1:b3:35:0c:57:41:
                    fd:14:60:f8:ad:74:30:92:9d:16:66:f7:9e:49:46:
                    4d:99:1c:bd:b0:2d:1b:5b:a8:17:53:1c:af:51:68:
                    74:fc:56:d0:b4:96:1a:fd:79:4a:ca:cf:c7:17:05:
                    33:e2:d2:92:10:9f:b9:2e:9f:2a:8e:f1:86:1e:75:
                    81:b8:55:27:61:7a:30:ab:d9:43:b0:30:13:8d:00:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:60:CC:28:0F:E5:FF:ED:38:8D:47:A0:0B:2C:E7:F8:02:39:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:b0:b7:c8:0c:ab:dd:3d:f8:55:c2:7b:6e:a0:e6:95:0d:
         bd:d3:d2:b4:88:1c:67:c1:11:0f:57:2e:e4:a9:7e:70:dc:6e:
         e7:b1:78:e4:7c:f8:ee:b9:76:90:3a:d7:ae:d1:a1:92:2f:d1:
         e7:a9:ce:47:1f:03:af:e7:97:9d:8b:ec:91:87:a4:e8:b5:1c:
         c9:70:6a:c3:05:45:7b:ed:a0:77:7e:f4:9c:10:92:6a:c0:20:
         ae:8a:be:8f:08:48:cf:33:1c:ba:d0:4b:fe:1d:e7:9c:81:00:
         47:61:af:7e:fd:a6:a4:f1:43:d8:1b:8d:e8:3d:d3:9b:9b:87:
         89:9c:5f:43:9a:1a:e9:d9:e6:15:0e:4c:e4:6f:d8:96:57:45:
         0e:2e:0b:ad:86:d4:38:23:da:58:8b:1d:4c:ff:ba:1f:6a:fc:
         51:6a:06:ff:e2:69:ec:9c:30:a6:f8:a2:0b:8a:b4:1b:f2:6f:
         36:70:7b:f6:f9:8e:fb:55:db:24:d3:b8:70:57:e8:05:6b:4e:
         ac:68:31:b7:3f:2a:83:4c:47:a5:36:09:b8:7f:4c:25:c2:78:
         c2:23:f5:ed:1a:ea:ea:50:95:91:79:50:f2:11:1a:fa:e2:7e:
         38:55:85:cf:98:6d:16:9b:c6:7d:46:ba:2e:e8:63:e4:be:02:
         46:c9:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:29:57 2025 by rpki-client