Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa
File:                     35af795b-ae39-3248-b884-aa76cc67bc0b.roa (raw, json)
Hash identifier:          pFgm6JJWtFNtajEcBzS5aRuRaPBLVX2a7a4Kwu9qk50=
Subject key identifier:   74:90:7A:64:CE:56:E5:C1:8D:53:F3:A2:B2:1A:77:09:F0:B4:9E:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1892376A714971B388A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1005:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:18:92:37:6a:71:49:71:b3:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=d7a69e3f-bdc4-4191-8149-aad43758ec46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9a:ad:47:28:e2:9b:bc:01:91:d3:2d:da:d8:
                    f7:29:ef:2a:c1:b8:6b:82:59:a7:8a:66:3a:a3:8a:
                    77:d1:7e:f4:af:12:c2:98:2c:d0:cb:34:b1:74:5c:
                    1d:9b:d8:47:04:89:ab:15:a2:75:b4:32:7a:5c:bf:
                    22:72:84:6f:02:63:19:fa:ff:a8:a4:82:9d:76:4f:
                    33:cf:c8:d7:66:97:10:7c:f9:56:b2:25:c0:12:ca:
                    42:34:bb:3d:2a:48:16:0d:5d:4f:7c:e1:99:f5:13:
                    d5:12:f7:1e:3b:cd:c2:c9:d8:5a:61:c6:17:b6:a2:
                    49:72:08:2a:08:db:d3:1f:4c:02:77:36:70:6e:3a:
                    51:e8:d3:5f:ef:06:ab:3c:32:61:40:e7:66:5e:04:
                    d2:46:8a:e1:dc:4a:26:27:1c:22:66:60:9e:31:fb:
                    d2:9e:dd:5d:d6:06:04:5d:d4:9e:4f:d6:49:17:19:
                    56:35:c9:56:47:4c:df:95:87:95:9f:70:0c:57:14:
                    0a:21:b2:3c:6d:52:f8:22:1a:8a:44:96:12:e1:5f:
                    ba:55:27:9d:a9:76:ff:a1:28:59:08:bd:ba:4e:b8:
                    ba:a6:3a:82:41:a5:d1:78:93:ad:69:56:94:f0:b2:
                    49:e5:dd:79:6b:05:1e:1b:29:2c:ce:1f:04:d5:eb:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:90:7A:64:CE:56:E5:C1:8D:53:F3:A2:B2:1A:77:09:F0:B4:9E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:31:d9:19:b7:89:78:1f:90:4c:ec:e5:ec:77:e0:2b:68:8f:
         6f:eb:04:a3:6d:26:9d:46:a9:59:53:c9:be:f3:30:7d:b0:da:
         89:b7:79:99:ba:cf:9f:19:ef:70:2b:3d:b1:9b:b1:de:e7:3b:
         a3:f0:52:5f:ce:ee:fc:c7:7e:c5:33:88:00:6e:59:c5:5e:80:
         c3:74:78:6f:01:13:22:eb:24:61:8f:d1:10:a2:8a:8d:74:fa:
         90:64:67:17:60:87:e4:f9:ef:ec:d9:c1:b2:ed:ae:f7:6a:d2:
         c0:20:c3:22:c6:59:bb:59:5a:2c:8e:29:ad:91:a2:cb:51:14:
         9b:4a:47:59:a6:1c:2f:01:f1:06:0a:a0:0b:d8:b1:12:83:b7:
         22:de:6f:59:86:f6:68:ba:8d:51:b1:2a:8c:80:a3:f5:1e:8e:
         04:c6:f4:c6:27:e5:57:af:33:b6:4b:db:6d:a2:26:5d:80:0f:
         db:a8:97:a9:58:49:86:b3:d5:65:a5:6b:a8:50:78:74:f2:1c:
         e2:86:5a:8e:a5:42:a8:36:db:8b:bf:d4:7a:88:9e:aa:80:55:
         c9:99:6c:cc:5d:cb:08:22:06:e0:ff:34:fe:7a:37:61:1a:80:
         75:60:ae:c2:63:a1:56:05:74:09:9d:54:ed:3c:36:8e:d6:07:
         06:52:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:28:28 2025 by rpki-client