Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384b56fe-ead6-3a54-971a-346aedfbae33.roa
File:                     384b56fe-ead6-3a54-971a-346aedfbae33.roa (raw, json)
Hash identifier:          yG6605mc1pBOj7B5XdGAdw/325yow/ou0QGdhyrHJ8g=
Subject key identifier:   2E:BB:C1:57:81:E8:18:14:FB:15:51:DC:64:7C:53:CB:AC:F1:7A:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557E2B8FE556DB76AC6A98
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384b56fe-ead6-3a54-971a-346aedfbae33.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:d020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:7e:2b:8f:e5:56:db:76:ac:6a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=7926ee6f-ab7f-420b-b759-d6b9b31c8402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:82:89:cf:ca:59:b8:d4:b4:f8:8b:a6:1f:
                    e8:dd:4d:a5:d4:fa:6e:f5:a6:a5:44:b1:17:b1:5d:
                    cd:f5:8d:88:16:26:28:21:a5:05:c7:de:15:7c:85:
                    15:74:91:38:f6:e4:b8:dc:e3:fb:46:f0:9b:0c:a4:
                    73:d8:2c:c9:a0:fb:24:a9:8c:b3:65:73:67:e0:c9:
                    88:18:a1:99:57:30:08:7e:6a:6f:8f:15:c1:07:07:
                    a2:2a:be:dd:f5:f8:4f:71:c2:02:52:18:65:d2:ae:
                    93:25:f0:4d:60:c5:21:11:1e:c7:bd:67:a4:c1:b8:
                    db:db:52:f7:5d:11:d3:49:09:67:9e:6c:d9:0b:12:
                    eb:16:7d:b2:fd:57:5e:04:4f:52:11:c2:be:c2:bf:
                    5c:fa:70:a7:67:3d:b5:87:09:fe:31:e3:97:d4:35:
                    6e:ba:8e:44:11:66:48:f0:1b:06:15:9e:90:a3:22:
                    97:60:65:c7:5c:60:45:0b:07:57:a2:24:3c:e4:7c:
                    dc:98:18:f7:33:e8:83:a2:94:05:ef:a9:c9:15:b0:
                    99:09:cd:43:ff:dc:63:33:c2:66:ba:25:e0:3b:ec:
                    aa:69:6d:71:94:22:4a:28:aa:59:a1:c9:ac:f8:24:
                    03:ca:41:9c:19:0e:8f:de:4a:81:0e:8c:28:a6:d3:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:C1:57:81:E8:18:14:FB:15:51:DC:64:7C:53:CB:AC:F1:7A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384b56fe-ead6-3a54-971a-346aedfbae33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:92:e9:4a:ff:dc:91:12:33:a0:db:14:b5:dc:e6:63:72:
         59:34:8c:8d:f2:dd:33:1f:a6:1c:62:29:ce:96:61:f5:c4:78:
         c0:dd:75:09:67:5e:1d:cc:2c:ac:ff:10:22:46:81:6b:3c:df:
         17:59:ec:22:ce:9d:70:4a:28:03:92:ff:af:fa:ba:10:cf:51:
         35:46:2b:0b:4d:71:01:27:7c:fd:26:4f:fe:d9:ee:21:d8:20:
         16:e3:1c:8f:78:17:94:f5:c5:22:b4:8b:10:91:b3:09:34:6a:
         97:59:03:e7:50:8e:04:03:a7:e1:0b:d0:fd:8b:59:06:bd:67:
         1e:71:ba:d3:08:33:02:89:88:4c:f6:e8:b2:cf:78:85:e4:19:
         c7:72:e2:38:13:86:fd:ef:5f:d1:b2:ec:52:2b:da:b2:fc:1a:
         14:d1:a8:99:b5:d4:32:a2:e4:89:cd:fd:e1:03:b2:05:ef:09:
         2b:c5:5d:c3:50:9d:0b:b2:8e:cf:fa:35:a6:5a:ac:67:c9:84:
         6d:2f:b8:c0:ab:eb:a1:0a:e3:c7:45:11:b6:4c:1a:1b:4c:92:
         a2:c0:d3:df:cc:3c:41:a2:76:05:3f:e3:e8:7f:70:29:50:6a:
         90:4a:27:44:ad:29:19:a8:32:d5:48:e7:8e:50:e0:ee:af:3b:
         95:e6:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:30 2025 by rpki-client