Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03ab9f77-764e-3f8d-84f1-a55196b6e701.roa
File:                     03ab9f77-764e-3f8d-84f1-a55196b6e701.roa (raw, json)
Hash identifier:          E+ntBEEs54Y02UMEB4lGmbxfLX0kWbTz4kbouc0C/3k=
Subject key identifier:   04:CC:89:EB:45:E7:E2:C3:A6:C5:21:5C:8D:6F:6A:51:5F:C7:1F:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557694B11D5D26AB1F95C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03ab9f77-764e-3f8d-84f1-a55196b6e701.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1010:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:76:94:b1:1d:5d:26:ab:1f:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=4e425093-e81a-4325-944b-21f5f6dd43b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:80:e1:ed:5e:f3:67:c2:59:0a:69:6d:c4:
                    4b:16:06:14:4a:3d:df:8b:31:a0:1e:cb:fa:c8:2d:
                    bb:a5:4c:15:c1:a7:a0:d5:73:7b:f4:cb:7d:7f:38:
                    bc:35:47:74:0a:8a:9c:3f:f1:66:5c:a1:aa:f0:c8:
                    0f:c5:86:20:92:0d:af:06:76:02:c7:7a:53:56:25:
                    5e:fc:3d:a7:76:44:c2:82:56:f1:6b:49:0c:cf:42:
                    38:57:ab:87:f6:90:dd:22:9b:0a:14:e0:6a:39:1e:
                    b4:b8:58:e7:9a:2c:58:5f:5b:50:39:98:b3:68:cf:
                    00:69:40:c3:fd:81:e9:c5:4c:50:58:4f:0e:81:16:
                    9b:94:47:9b:09:e7:97:78:e0:c4:38:62:a9:dc:a7:
                    0c:3e:0a:2f:8c:72:00:ae:0f:c2:5c:aa:e0:37:7c:
                    2b:e5:62:0c:76:14:41:3d:bf:30:c3:f7:e1:6d:7b:
                    0a:bd:2a:36:53:3b:79:ab:57:2e:7d:4f:df:e9:32:
                    37:86:c7:77:7d:c3:28:b4:52:38:0c:16:33:6e:9d:
                    5d:e1:52:f6:11:a2:6c:1d:63:a4:00:e8:90:0f:85:
                    5d:23:13:c6:96:7b:82:a0:e4:68:e5:e9:a1:31:05:
                    01:f0:c5:09:01:01:a3:50:09:a6:a7:53:ad:83:7e:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CC:89:EB:45:E7:E2:C3:A6:C5:21:5C:8D:6F:6A:51:5F:C7:1F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03ab9f77-764e-3f8d-84f1-a55196b6e701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:9b:78:86:42:93:02:26:2e:86:5e:76:f0:ec:ae:d6:72:
         69:0c:7b:40:fd:d3:eb:09:95:59:63:ea:2c:c1:9f:b9:90:23:
         9b:5d:b9:96:06:bf:cf:19:4f:54:0d:9e:e2:8e:21:fc:45:c8:
         e2:a4:61:9e:53:8b:84:cb:ff:27:96:e3:f9:a4:0a:8f:39:1a:
         c0:a3:b6:5f:f3:cc:a1:9d:f7:79:b7:3f:f3:1c:1f:43:a6:b5:
         e3:ec:51:28:a2:28:6e:74:38:53:db:03:be:b2:02:cc:eb:bc:
         4c:bd:c1:5a:e6:cf:6a:c9:62:2c:e3:c7:df:81:8a:7f:0a:dc:
         3c:4e:5e:b1:73:b8:42:3d:a4:48:e8:a4:fc:aa:c2:15:77:37:
         cb:c4:af:e0:b0:07:4d:c4:7c:f8:69:0d:14:ed:da:99:e3:5b:
         9f:4c:3d:38:49:4a:21:ab:58:26:ca:71:da:e7:94:11:68:42:
         90:e3:86:14:ad:0f:72:cd:07:fd:a5:96:0a:26:79:19:36:64:
         6e:7a:a7:4b:70:9b:ff:16:51:d5:21:1d:2d:1b:3a:51:04:7a:
         76:7d:8f:22:7b:db:16:ba:c8:d4:d9:1e:d6:47:e6:3e:19:0b:
         fd:fc:99:31:55:8f:25:35:29:fb:e5:29:16:18:55:6b:6f:71:
         79:3a:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:57 2025 by rpki-client