Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e7395-80ad-343d-a875-11d014572296.roa
File:                     468e7395-80ad-343d-a875-11d014572296.roa (raw, json)
Hash identifier:          nt4re1KCu0035Plqy2+EJT3+flgOeg4bJEOFSizxWYc=
Subject key identifier:   DC:34:5F:2C:58:C7:BD:66:BF:EA:22:C0:07:D8:B7:8A:3C:DA:07:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295586FB41FA9887830BCF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e7395-80ad-343d-a875-11d014572296.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1016:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:86:fb:41:fa:98:87:83:0b:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=6ab9d874-84e4-4e1f-9862-ea5ab086c5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:8b:90:93:6b:c3:fc:b6:8c:79:7d:27:16:
                    72:c1:ad:6b:60:1b:7f:21:cf:46:88:07:b0:a0:bf:
                    7c:ea:8a:59:3a:21:07:53:e8:f1:50:f7:41:6b:2f:
                    21:d2:46:20:1d:ff:e3:ff:ea:89:d7:dc:12:96:bf:
                    c4:c3:1f:2c:1e:2f:e5:9f:07:03:fc:b9:07:7c:d8:
                    c0:54:6b:f8:9c:14:73:39:11:e7:4c:22:14:45:8a:
                    01:42:57:3f:20:61:f4:b7:c4:53:29:cb:37:c7:77:
                    c4:88:67:8b:b1:69:08:10:7f:ba:43:a1:7b:a5:ba:
                    8a:ba:59:b3:93:fa:c7:76:19:96:77:3f:c9:aa:8c:
                    1f:d6:2e:87:05:1c:2d:cf:1f:14:be:7a:83:35:ea:
                    21:a2:1c:cd:02:da:d5:87:0b:3a:65:a8:54:4d:c1:
                    1d:79:98:91:c9:56:ad:e4:ff:4f:e5:5c:86:5c:1b:
                    31:b6:e6:bd:2e:f9:2a:41:1d:67:fe:69:b1:58:25:
                    85:3f:f6:7f:62:de:9c:4e:10:37:b4:e3:71:2d:d4:
                    65:f6:5e:f2:d5:e0:65:78:52:52:16:91:47:1e:a0:
                    d4:f8:66:a0:33:4f:a0:fa:b6:65:dd:12:1e:5d:24:
                    2d:aa:11:e8:22:4b:16:53:4f:8f:6f:76:68:55:ec:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:5F:2C:58:C7:BD:66:BF:EA:22:C0:07:D8:B7:8A:3C:DA:07:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e7395-80ad-343d-a875-11d014572296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:86:3d:10:d2:34:f1:e2:04:c9:de:b5:60:e2:4a:b9:4c:
         db:a4:fd:4b:f3:69:bf:ea:d8:37:68:03:48:ff:f3:a6:fd:d8:
         c0:3b:24:02:f9:d4:66:ab:85:48:8e:b8:f7:5c:e9:8b:58:16:
         97:02:1d:e9:fe:c2:1c:fc:84:66:5c:8b:4a:e6:65:3b:70:a7:
         99:a3:b6:51:7c:cc:c0:0a:97:78:53:aa:63:b6:8d:ef:62:d0:
         ac:b8:27:d4:be:2a:d3:59:da:4c:97:b0:25:fb:fc:bf:24:a4:
         3e:26:3f:02:0c:76:f6:4b:72:69:47:a9:94:b2:2f:13:69:eb:
         72:fd:68:74:e8:6d:67:18:b8:db:fb:91:40:14:98:27:bf:a6:
         dc:77:d2:20:06:df:72:86:f5:63:33:7d:69:ee:14:bf:ed:4e:
         75:c8:c9:37:af:ec:89:69:31:bd:83:1e:88:b6:72:2a:5f:e7:
         c6:4d:7b:c3:11:14:55:2e:82:c0:00:d0:58:d1:e1:04:96:8a:
         8a:5e:ae:35:81:18:ce:73:c7:1e:9d:93:3c:8d:db:4f:9f:f5:
         6f:e6:e1:5c:b6:8e:35:66:8f:67:7b:61:89:e0:1f:e2:69:24:
         d6:01:92:70:f7:bc:64:85:ff:9a:59:46:65:b9:40:05:81:75:
         47:46:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:26:31 2025 by rpki-client