Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
File:                     374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa (raw, json)
Hash identifier:          mrnCEEtT5Gx6xX0Ih83wBzppitq7ifM0cIItWuSqZUE=
Subject key identifier:   61:89:6E:52:2A:4D:34:5F:FA:65:A8:E8:1F:52:0F:2E:72:5A:2D:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295577CF16B1F603E0074EF4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:77:cf:16:b1:f6:03:e0:07:4e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=6987725c-a0d7-4e38-ae4c-464a4bfa9dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:ce:31:58:25:0c:98:00:04:c5:56:a4:4c:
                    05:c5:7c:b1:5f:0f:ef:30:f6:33:39:a6:25:ea:b5:
                    3a:63:6a:f1:cd:b8:c0:d4:2e:c3:39:c8:85:5d:62:
                    ef:c9:03:70:ce:6b:7a:ab:18:90:79:5a:21:9e:c5:
                    59:64:3b:ba:c1:41:5a:d8:36:8c:7e:d4:4f:c4:dd:
                    56:ce:95:e1:f7:19:c6:a1:76:94:c8:24:f3:68:8e:
                    a9:13:12:9e:eb:a5:db:ab:0e:4c:b9:fe:6b:eb:80:
                    65:4c:84:aa:6c:75:8a:7f:1c:65:22:52:c3:34:78:
                    07:b5:01:8f:d6:9a:64:c4:51:7c:97:72:a9:71:9a:
                    f0:8b:b7:37:cb:41:f8:64:bc:ab:66:50:17:13:f2:
                    12:72:9e:c9:17:2d:94:18:50:53:e7:0d:b0:bd:08:
                    f2:09:2e:a2:c4:61:b6:34:41:cc:73:63:d7:43:88:
                    cc:9a:25:e2:6f:90:f7:c4:c6:1b:a3:08:53:fb:b6:
                    eb:80:5e:c2:09:35:76:81:8e:82:ed:73:2e:e3:4b:
                    73:76:59:60:5c:60:46:aa:b6:02:35:59:31:ec:28:
                    fb:9e:87:49:69:a5:d2:84:63:76:33:da:c0:8c:ee:
                    56:d5:9a:f4:ce:32:73:75:53:f0:14:73:d6:80:51:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:6E:52:2A:4D:34:5F:FA:65:A8:E8:1F:52:0F:2E:72:5A:2D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:14:1c:52:94:01:ea:e8:ac:c4:91:a7:f1:c6:b2:4b:ee:
         47:b0:a0:36:1d:e2:5e:6a:90:ad:21:5e:56:53:5f:75:ac:8e:
         97:a7:75:7f:19:cb:04:df:e9:fb:da:b3:db:19:0b:4b:13:b9:
         e2:b1:21:03:39:9d:93:5b:ab:c8:98:2d:fa:8e:7b:c0:85:33:
         ad:75:20:3a:3f:82:97:01:ca:07:30:3f:e7:ad:ac:45:c3:d0:
         89:9b:cb:4b:f6:55:a9:fb:07:53:d4:b1:21:6d:2c:70:58:d9:
         43:af:46:76:ec:1a:82:1d:2f:0b:72:12:4d:71:97:0d:62:3b:
         16:dc:58:69:db:cf:5e:45:29:3d:8b:3f:e1:21:90:d1:9a:80:
         94:a8:62:55:06:f8:a7:ff:f5:db:d5:5d:58:f1:48:9d:e7:02:
         e9:03:64:29:8c:47:0e:b9:dc:9b:c9:02:4f:3e:80:ed:8d:a9:
         d3:08:62:b5:c1:28:51:25:07:ca:84:c1:db:e4:c7:0a:66:17:
         a7:5c:a2:8f:9a:41:de:56:db:5c:ab:bb:32:bc:08:f3:cb:25:
         ce:ab:3e:ea:44:17:ba:6a:36:2a:c7:fe:1e:b4:70:d0:55:c1:
         30:92:78:b0:8d:94:f3:99:bc:cc:ff:2d:06:ae:b8:e7:22:4a:
         38:4b:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:29:59 2025 by rpki-client