Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa
File:                     2acdfa14-166e-39d8-97bc-f81b43f29528.roa (raw, json)
Hash identifier:          1dIwU30oDE/O0qaywLpgtCz6CjCJ4ZGbSjO1wO5eH1s=
Subject key identifier:   18:49:3B:D6:12:2C:79:FC:1F:6F:B6:44:EE:A3:4D:F6:D0:D9:AC:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15E9BBFE40D3F54C2C6B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1003:a418::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e9:bb:fe:40:d3:f5:4c:2c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=2c07a5c6-18bd-4724-8ea3-e394dda7c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:27:6b:a0:2d:c1:d4:fd:e7:8d:d4:d0:72:
                    fd:86:2a:b1:98:ed:3e:e7:32:6e:17:08:11:a3:29:
                    c6:c9:1b:8b:22:13:38:bb:34:b8:24:f2:36:b4:9f:
                    4a:58:e4:1b:20:c3:b1:59:fa:cc:a7:51:e9:24:fc:
                    f5:11:ca:97:60:05:e0:7f:22:d3:04:79:f4:76:71:
                    85:a8:1e:56:25:c4:41:42:ff:bc:c2:4f:0c:76:7a:
                    a7:10:a5:86:ee:5e:ab:15:14:cc:87:55:32:4b:38:
                    88:1e:b6:16:7f:a4:16:28:03:c5:cc:52:a0:54:13:
                    99:e4:37:d0:16:45:14:7c:f6:91:10:94:26:4c:89:
                    95:ac:3c:e7:3d:34:2a:3d:65:6f:94:61:5e:40:0c:
                    dc:e4:17:a6:2a:6a:04:1b:31:0e:ce:d0:0e:65:7c:
                    30:96:cf:75:23:3e:e2:a5:c5:88:5b:06:3d:73:9d:
                    42:f8:8e:b9:14:6d:4e:c4:96:08:7b:74:45:ba:ad:
                    5d:31:db:86:aa:49:26:a8:08:89:22:4f:c4:9c:b6:
                    75:56:96:3d:3d:85:c0:c2:1c:38:0d:21:3c:04:79:
                    78:fb:2f:ad:5c:98:1a:fb:de:75:01:c3:6f:38:cc:
                    33:8f:53:3f:7f:fe:03:bf:bd:ee:bf:bf:7b:11:f1:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:3B:D6:12:2C:79:FC:1F:6F:B6:44:EE:A3:4D:F6:D0:D9:AC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a418::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7b:27:80:86:90:1e:b8:ec:2b:14:9a:03:42:ab:cc:8f:3f:
         e9:22:11:33:b3:a3:3d:67:68:16:80:db:e7:9d:a5:2e:ff:ab:
         51:70:3c:c6:92:be:d0:95:eb:e9:dd:19:f6:ad:b0:d7:ee:88:
         0a:fd:38:44:67:e0:23:0e:cc:7f:ae:96:09:70:8a:d5:e3:c8:
         29:02:5b:f6:78:fb:6a:26:fc:65:7a:81:f5:3f:01:4a:8a:42:
         75:3a:e6:1b:85:a2:b6:f1:02:a4:55:13:05:d2:54:85:7e:46:
         08:26:b4:97:41:55:c0:63:50:9e:c5:03:23:14:49:84:9b:4a:
         aa:46:f6:24:43:2e:db:45:7e:15:45:a8:33:7f:0c:01:4d:91:
         db:40:5d:fb:3a:58:65:f3:b1:95:1c:e3:66:e4:0a:58:a8:6b:
         60:b5:65:53:d8:58:b0:71:94:89:34:c5:60:6e:3b:d0:7b:8b:
         52:bb:29:3a:1a:43:f2:20:71:fa:24:dc:01:53:36:e4:14:fd:
         68:7d:69:85:04:72:db:83:2a:d2:4c:32:c6:5b:4e:52:72:dc:
         5e:b3:21:99:2a:42:8f:ef:85:fb:18:8f:b4:23:3d:52:65:b7:
         20:1d:73:22:5e:56:61:7c:50:c9:dd:2c:55:ee:94:d2:15:5e:
         49:f9:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:50 2025 by rpki-client