Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa
File:                     36fd1045-d430-3a38-bf08-1b0d3a484f84.roa (raw, json)
Hash identifier:          b+Z2CWuWv+GVp0abhF02FiKAWiXfiH5lYVOAAK1iaJ8=
Subject key identifier:   82:CE:A7:A3:31:92:58:09:AE:69:47:75:BE:04:8F:4C:A7:84:F5:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8575FAC18F2D841AD53EF2A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1017:a8fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fa:c1:8f:2d:84:1a:d5:3e:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=d71516a4-ddb6-44d1-a962-46d870a14799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:b7:85:4d:7c:32:ff:d7:8b:5c:e9:8e:9b:
                    a2:61:2c:7d:7d:3d:08:d5:fa:11:a1:ec:ab:c5:d8:
                    92:53:8a:37:c0:ea:5a:3b:41:84:5e:0d:8c:d1:c1:
                    50:40:43:2e:a4:21:6b:5f:be:4e:43:fd:3c:42:4c:
                    a9:08:df:35:7f:c1:f2:2b:22:a9:e5:dc:fe:bd:52:
                    94:85:7d:f2:1c:a7:1e:5d:f7:cb:2d:c4:4e:cd:9f:
                    d9:9a:11:de:09:c2:0b:45:13:18:61:60:2a:ec:b2:
                    9f:54:c4:77:cb:51:e2:d3:de:0a:9b:04:13:d0:0b:
                    43:68:57:0a:6b:e0:f9:67:b5:82:69:31:25:95:41:
                    8c:33:53:f1:67:be:11:f7:44:50:07:ba:97:e4:ec:
                    86:cb:95:a5:8d:dd:8a:32:31:39:99:01:7f:c9:ab:
                    8a:b7:3f:02:21:0e:af:d4:9a:bd:23:b8:ed:66:66:
                    26:a5:11:e6:7b:57:10:49:ef:a3:14:11:a3:3a:31:
                    49:cc:ac:6f:86:e5:65:31:2c:da:d2:cb:8f:e2:d5:
                    81:b0:3d:c0:06:33:48:e0:7e:a9:3f:ed:bf:0c:0e:
                    2d:57:04:4e:36:c8:26:74:b5:87:06:57:45:4b:c0:
                    37:9f:f0:d8:e1:b6:c7:5b:31:94:2c:45:75:d6:d6:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:A7:A3:31:92:58:09:AE:69:47:75:BE:04:8F:4C:A7:84:F5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a8fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:73:15:42:11:82:c0:ae:81:50:62:b7:f6:47:8c:a0:48:
         05:51:02:16:2a:18:7a:3a:51:ef:c9:a4:60:81:3a:f2:98:cf:
         6f:82:65:2d:da:72:f7:4a:f5:55:ad:27:48:be:5f:29:d4:ec:
         5c:d1:a6:d3:20:aa:70:b2:26:8c:22:01:26:b0:80:db:e1:d3:
         b7:f4:f1:42:47:a1:6b:ce:63:60:da:25:8e:78:88:c9:6a:55:
         0a:bc:ea:5a:da:01:94:75:20:3f:c5:d4:02:e9:00:a3:e6:57:
         8a:ba:b9:1b:3b:0b:b7:66:33:a2:40:bd:c1:05:2b:a5:a5:ce:
         82:30:74:4e:96:29:b4:a2:48:c9:22:53:9d:e9:b9:ee:ec:e5:
         5a:a8:25:b4:49:ba:fa:d7:ba:a4:ba:d1:66:00:e4:ce:0c:fb:
         e1:bd:a3:70:5c:b0:a1:6c:bf:be:13:66:e9:a3:26:72:0d:17:
         38:63:2b:2a:c3:f2:e1:09:00:76:33:f4:bd:9e:10:a9:8d:b4:
         8e:5d:0f:09:4b:69:17:4b:56:c1:77:80:09:78:d2:37:f0:13:
         93:e4:90:a9:41:0e:58:fc:0d:ea:9d:bd:b1:1a:34:cf:f0:a6:
         cf:41:b2:99:71:68:a6:6b:d3:08:be:82:a5:46:79:2b:b3:98:
         b6:d8:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:56 2025 by rpki-client