Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3874f4d6-328a-35ad-ac14-db5ab22400f3.roa
File:                     3874f4d6-328a-35ad-ac14-db5ab22400f3.roa (raw, json)
Hash identifier:          UbfAhIG/R5rrEzV2Sy6K4jjHWxpyn2ARuNFVu51TmIQ=
Subject key identifier:   EA:5D:C7:BB:D6:B6:2A:22:30:B3:32:10:0C:61:DC:EB:29:20:34:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EB4AD012079B335444F5D1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3874f4d6-328a-35ad-ac14-db5ab22400f3.roa
Signing time:             Tue 20 May 2025 19:39:32 +0000
ROA not before:           Tue 20 May 2025 19:39:32 +0000
ROA not after:            Mon 18 Aug 2025 19:39:32 +0000
asID:                     6167
IP address blocks:        2600:1012:b380::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:4a:d0:12:07:9b:33:54:44:f5:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 19:39:32 2025 GMT
            Not After : Aug 18 19:39:32 2025 GMT
        Subject: CN=2ee8f3be-13c5-4767-ae6b-d4b20e796bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:3b:23:6e:dc:18:ad:e1:3e:5f:9c:d0:18:
                    dd:e8:0d:37:47:05:8c:82:72:69:cd:36:6f:e9:c5:
                    4e:98:c6:ea:64:51:7b:53:6d:9f:c7:d7:bf:55:66:
                    1f:1c:50:e0:cd:a7:7a:78:2c:0c:9c:c9:a6:85:cd:
                    ad:11:20:68:6a:64:0a:7e:29:81:e6:87:67:59:ba:
                    c7:66:e8:9f:06:99:01:c5:17:dc:45:ae:09:40:e2:
                    36:b9:00:70:a8:73:fc:3d:86:3f:a8:5b:8d:73:64:
                    cc:97:e0:ef:4a:22:21:70:0c:3c:90:99:4a:01:c9:
                    86:f6:89:59:07:86:95:62:12:6e:f3:98:bc:86:0f:
                    27:f0:ed:f1:05:b1:a9:a5:ee:c0:8f:f5:e8:b0:9c:
                    9c:d2:31:10:a6:39:0d:a3:2d:77:f4:f4:58:10:a1:
                    ab:b8:39:72:82:08:92:f8:29:58:aa:8c:53:56:a4:
                    8f:3c:56:3a:d0:15:fc:ce:59:f4:06:41:62:99:c8:
                    81:23:38:cf:bf:7c:84:8e:64:95:c0:da:16:d5:f9:
                    4a:84:f8:c1:ed:e7:2f:7d:bf:64:b1:a5:3f:dd:7a:
                    84:4b:96:6c:0b:f9:b4:5b:da:d2:9c:fb:87:a8:50:
                    c6:7d:7a:0a:d6:d0:c1:96:85:ce:ad:e9:dd:08:38:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5D:C7:BB:D6:B6:2A:22:30:B3:32:10:0C:61:DC:EB:29:20:34:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3874f4d6-328a-35ad-ac14-db5ab22400f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b380::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:d2:7c:35:4d:50:f6:16:38:a2:32:53:42:bb:88:2f:3c:
         93:0b:6a:24:71:de:51:6f:3c:3b:1d:68:f6:e7:96:ff:8e:b5:
         9f:1a:03:e5:a1:a2:1c:fb:6f:72:6d:0a:16:16:00:de:36:a4:
         56:89:30:9e:b2:32:54:2f:4e:28:95:ec:3f:0e:43:54:bb:11:
         59:6e:e2:a4:49:ac:5c:f7:68:6f:1c:d9:e2:74:6d:90:58:58:
         5b:a2:38:b5:a5:6d:c9:c8:4d:27:13:a5:05:34:e9:cb:b9:b8:
         27:36:d9:4c:b5:36:1f:39:b8:29:53:0f:2d:c1:67:1c:94:53:
         71:9e:3b:4a:1d:b1:31:d2:d3:f5:73:ce:96:99:0f:7f:bc:36:
         26:b0:78:e7:23:0a:f1:a1:33:f9:89:20:e2:05:02:9d:64:67:
         dd:2e:e7:4b:71:e6:cf:95:56:99:2a:14:e0:44:b9:7f:d9:96:
         76:06:b2:1d:97:d3:c2:15:d9:9d:6f:84:ee:e6:5a:d7:59:21:
         57:d2:38:5b:c8:96:2f:24:30:0f:d9:2c:da:d9:95:70:04:5f:
         47:14:05:4a:ac:ff:4f:93:97:14:4f:65:ae:a0:fa:1b:48:dd:
         d2:34:22:d9:80:b8:3c:34:9d:4e:de:18:26:6e:5d:16:b4:b3:
         22:19:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:06:08 2025 by rpki-client