Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa
File:                     8df1abb7-f88a-322f-95c7-88e15c151d22.roa (raw, json)
Hash identifier:          AIQLw/6WG9BpMScqbXGaFooVpF6K8SeF9rVd2by8Wyc=
Subject key identifier:   DB:64:AD:B5:EA:F6:BF:59:2B:AE:2B:16:24:F8:4D:1A:AF:D8:00:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15EA441598FB527ABAF780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1004:a060::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ea:44:15:98:fb:52:7a:ba:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=bfa2d8af-6dcd-4913-8e25-ee770175d85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a3:31:d7:91:23:6f:c6:9f:fd:a2:a4:5a:f4:
                    d4:ed:47:67:3a:e6:ed:17:2c:cf:7b:9a:f5:a2:62:
                    2f:72:b6:c0:7a:ad:4c:c4:f7:57:bc:db:fa:82:9b:
                    5e:0d:3e:93:c0:d4:38:98:34:10:93:20:1d:1a:db:
                    46:05:ab:16:5b:2d:56:fb:54:25:7f:70:30:3b:59:
                    32:9c:46:3c:7e:44:7b:6e:d2:f0:03:db:52:7e:42:
                    ed:06:92:a1:8a:29:29:96:7b:a6:ca:c0:66:1a:70:
                    50:10:80:41:d3:76:0c:37:9a:3a:ba:b3:f6:57:a9:
                    42:28:ec:92:01:bd:15:ca:df:90:3d:c5:ae:d4:96:
                    e8:05:b4:dc:84:b3:21:66:98:ef:8b:f9:35:e8:dd:
                    4a:ed:55:20:55:78:4b:70:38:c0:dc:d5:b0:27:b3:
                    15:c7:2a:0b:e6:91:ee:62:4b:60:f8:2b:18:1d:f9:
                    e4:f2:86:2b:41:0a:57:e0:ac:6c:ec:f9:48:ce:df:
                    e5:af:91:ac:d9:35:13:27:35:cc:d2:ca:52:5c:f3:
                    4f:1d:ff:d6:a8:e2:50:62:19:a1:99:52:39:a9:75:
                    36:5d:86:0e:72:c5:d0:1d:8c:86:87:6b:ba:7e:c7:
                    cd:aa:f8:32:99:f4:f6:3e:7a:ca:2c:9a:7a:9a:67:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:AD:B5:EA:F6:BF:59:2B:AE:2B:16:24:F8:4D:1A:AF:D8:00:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:17:64:e3:f1:3c:c7:1b:71:9d:8b:71:54:9a:77:60:4d:
         ba:a1:cb:49:e8:de:85:1d:44:94:db:4c:64:54:0f:40:cf:5e:
         b5:ff:ca:74:f9:ee:df:a0:63:17:d7:f8:36:8c:8e:3a:22:50:
         75:b0:ee:5e:2c:46:3e:c3:30:b1:87:cd:ee:a9:37:82:9a:96:
         1d:4b:3d:0d:32:7a:d0:6e:a7:e7:6c:62:ea:39:32:79:44:a6:
         b3:78:af:4c:2c:d6:c2:56:3c:ae:ec:cc:f8:04:c3:09:1a:e0:
         7e:c9:76:98:49:0f:ab:92:17:55:30:6f:b5:e1:8f:af:95:c9:
         94:3c:86:82:ff:2c:e6:85:e6:c8:3d:27:6d:bf:b8:9c:2c:8b:
         13:aa:90:49:9a:f8:98:b5:ef:d9:3b:66:c5:ef:68:19:6b:aa:
         f9:23:9a:ca:00:25:43:ac:c0:c5:8f:db:20:ee:c4:b5:00:03:
         9d:0c:ae:59:6f:9e:32:35:de:0d:42:a0:65:dc:5c:98:09:8b:
         f0:14:cd:30:e1:0e:e4:ea:4f:b6:a1:0b:90:20:f5:45:51:c3:
         34:40:aa:72:84:a1:a6:c9:61:94:0d:fc:5e:f4:ea:d3:02:12:
         36:ac:ca:22:c1:dd:8c:3a:9b:8d:1e:f4:58:19:b9:86:25:69:
         29:3c:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:11 2025 by rpki-client