Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b7c1b3d-031e-3b6b-8fbe-aa8664c4030b.roa
File:                     3b7c1b3d-031e-3b6b-8fbe-aa8664c4030b.roa (raw, json)
Hash identifier:          wugwiNONOX9LPk6wZaMMBh5KCdiisiLPkK6+2MUsvYc=
Subject key identifier:   9D:B4:B6:77:93:06:21:C8:01:77:E6:E1:23:4A:A3:F1:0D:D0:6E:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295576CE25C19BCF30E61040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b7c1b3d-031e-3b6b-8fbe-aa8664c4030b.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1010:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:76:ce:25:c1:9b:cf:30:e6:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=119facc1-4530-4421-8ac7-dacf7e2aa0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:ab:ae:bd:07:8c:eb:1e:6e:ae:2f:53:79:
                    9a:d6:59:0d:01:68:3c:59:9a:28:88:34:4a:a5:db:
                    be:83:4a:bd:26:09:ec:33:81:fa:5d:e5:76:a5:34:
                    b4:24:15:75:0a:0b:78:db:e3:85:6a:81:b1:bc:26:
                    4b:87:1e:ab:25:29:53:8c:3e:56:38:0d:ad:89:c3:
                    06:22:18:54:0f:10:7b:dd:00:6f:a2:a3:cf:d1:82:
                    8e:81:c8:78:bf:67:3c:ca:c6:c6:d4:e6:d9:4b:56:
                    c0:38:60:3d:75:b7:d5:41:78:9b:d6:8e:6d:f5:60:
                    8d:02:79:43:65:72:c9:c3:96:a0:02:9e:27:c8:33:
                    aa:27:7c:23:97:55:5c:30:f4:a2:72:63:78:6f:2b:
                    84:b8:cb:54:12:ca:0e:c2:c9:e6:51:57:b5:8d:a7:
                    38:e4:6b:21:5c:1a:cc:be:01:12:36:26:51:0b:4e:
                    e7:8b:99:1b:52:2e:47:c0:28:a4:32:81:c3:d3:e3:
                    20:3f:2d:55:7a:0f:39:c0:6d:94:1d:cb:5f:16:df:
                    d0:7e:2d:19:5e:9f:c3:cb:9e:df:db:0e:bd:ef:6b:
                    63:46:d6:55:f3:fc:6c:20:7c:f6:a9:3c:0b:d4:b2:
                    2b:20:5f:22:39:8a:21:7a:61:ef:2b:26:80:96:de:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:B6:77:93:06:21:C8:01:77:E6:E1:23:4A:A3:F1:0D:D0:6E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b7c1b3d-031e-3b6b-8fbe-aa8664c4030b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:7f:aa:66:c7:f2:83:dc:d2:8e:7e:c9:16:3a:c2:82:17:
         5c:46:94:d0:ad:06:f6:2f:23:13:68:89:43:5a:d9:77:9b:b7:
         03:fb:5e:ad:3e:02:9e:d0:d8:f1:08:37:f7:bc:cc:06:af:97:
         42:98:8f:7c:65:3d:08:82:e1:26:22:9c:f5:b4:21:84:d8:48:
         5e:3f:22:f8:03:a5:6b:d6:96:b1:b5:11:0c:6b:10:e9:27:9f:
         d8:9f:81:b9:96:3e:15:54:14:aa:c8:82:95:ac:0a:5c:4e:d3:
         b9:2e:c1:64:e4:6c:96:d0:ce:fb:28:87:65:23:69:90:d5:00:
         fb:b7:93:4f:83:d8:7d:a2:35:92:cf:8c:a9:8c:c5:9a:ba:b8:
         ee:cd:5b:f5:f4:62:36:ee:9b:2a:31:76:34:33:4a:d5:f0:39:
         fd:f6:3a:fa:a4:c6:34:b6:7d:cd:f3:ac:63:04:b6:db:0f:a4:
         b7:a5:e5:df:70:4a:75:96:47:7d:d8:73:41:a3:0f:cd:1a:76:
         15:21:ef:51:5b:b2:3e:c0:ad:83:52:92:06:8e:e4:e1:2c:98:
         b3:06:c4:b1:13:a4:4b:da:05:c6:bc:a0:49:ee:53:54:fa:af:
         33:5a:24:2f:7b:7f:69:0c:13:6a:29:80:00:53:10:05:8a:7f:
         1c:a9:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:06 2025 by rpki-client