Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0876e956-125b-32ad-b83b-398eda648e2b.roa
File:                     0876e956-125b-32ad-b83b-398eda648e2b.roa (raw, json)
Hash identifier:          6ceV9ubN3W9lztC+tQe7rXQ7XSEPR1N23TAad3eRMyI=
Subject key identifier:   22:92:E1:B5:67:D2:C1:BF:B7:C7:B1:36:AE:21:89:CB:77:DF:BD:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557518ACD3EDB7E0DA7C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0876e956-125b-32ad-b83b-398eda648e2b.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1010:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:75:18:ac:d3:ed:b7:e0:da:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=0b450ddd-ddc8-44d8-8063-25ea79d6dba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:6d:5f:2e:48:ab:6b:f7:de:ea:00:b8:30:
                    37:27:4e:c9:a9:3c:53:76:1a:48:ac:b4:3e:5b:18:
                    74:bb:7d:41:9a:8d:c1:f0:82:2a:37:47:f2:9a:06:
                    45:6d:a3:d2:2d:dd:b2:15:09:bb:ff:98:d3:92:70:
                    1d:a9:d5:37:82:93:6f:c1:0b:d1:83:9f:9e:ab:30:
                    1a:46:f7:94:b6:96:37:7b:65:79:e4:25:6a:99:80:
                    7a:d8:b5:74:49:c0:31:9d:4a:dc:c3:e2:43:5a:88:
                    93:69:7d:63:3b:dc:bf:59:77:33:88:18:1a:2d:28:
                    81:df:1a:26:bb:90:16:22:ac:51:61:38:c0:00:27:
                    59:03:7d:7e:da:37:dc:a2:27:da:22:75:24:89:9a:
                    c4:1e:e5:87:48:3f:25:a9:00:90:ec:88:f8:a5:f6:
                    83:1f:df:7a:a0:3d:f3:bf:7b:f0:c2:7c:dc:4e:1f:
                    f0:c3:42:d1:4e:48:af:02:68:ff:08:a1:fc:48:d9:
                    be:12:ec:7c:07:f8:bd:be:4f:aa:0d:65:fa:ee:2d:
                    4e:e9:9f:0b:60:d0:00:3c:8c:a2:2b:be:b0:c4:8b:
                    67:59:e9:0d:a7:e1:9d:95:6a:be:5f:19:46:a8:41:
                    f3:61:c3:63:f5:8b:79:45:ff:56:db:16:56:94:44:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:E1:B5:67:D2:C1:BF:B7:C7:B1:36:AE:21:89:CB:77:DF:BD:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0876e956-125b-32ad-b83b-398eda648e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0f:6b:27:65:92:f8:d6:94:dd:58:95:b9:e1:34:03:6f:d1:
         bb:cb:dc:06:1c:dd:56:87:f4:2b:68:a8:d0:54:12:26:91:54:
         7c:82:56:68:ab:3a:57:3b:13:14:29:5e:77:87:9a:8a:0a:3e:
         d5:e1:00:3d:ea:69:57:3a:ef:a8:7b:ce:6a:15:72:a5:95:78:
         30:0f:33:76:dd:a8:33:fb:94:24:c5:8f:21:30:5c:3a:02:cd:
         52:b4:1e:ca:a3:70:19:b5:67:57:2d:c9:04:c5:1c:02:9f:55:
         ba:c0:f8:01:f9:f3:84:99:19:41:c2:c0:e4:17:91:e9:42:e8:
         9c:25:e5:dd:b7:de:a5:c9:7d:2b:95:ef:0f:5b:bf:3a:a8:da:
         c0:13:22:8b:c5:cb:53:af:ee:fa:06:b5:c5:b2:1f:1c:5c:45:
         cc:22:47:3d:d9:bb:d4:e0:f5:d8:55:c8:67:b4:db:0f:36:8e:
         8f:45:dc:f4:19:a2:9b:41:9e:44:86:50:6a:39:9c:5c:4b:a9:
         6e:d8:f4:52:c2:fb:27:e5:a3:e8:4f:7f:b7:e4:34:87:3d:61:
         1e:58:d8:ef:d6:7b:37:ab:5c:ec:b1:85:d6:37:66:f1:04:a5:
         ec:73:ba:f2:35:cc:9b:9f:4a:bf:39:3d:bc:d1:77:e9:4b:2a:
         69:71:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:42:39 2025 by rpki-client