Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/934c3009-2179-3b26-b734-0b38a08550d0.roa
File:                     934c3009-2179-3b26-b734-0b38a08550d0.roa (raw, json)
Hash identifier:          bhwJeMA8nQDlvozix4Hjbjgz79aJnKDlA5k4sM2eFnY=
Subject key identifier:   81:AE:9A:CB:7D:2A:A3:C8:6A:59:59:D8:6E:70:CC:54:2B:68:11:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A2955779A8CDCE507F31D1300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/934c3009-2179-3b26-b734-0b38a08550d0.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:77:9a:8c:dc:e5:07:f3:1d:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=199e17cd-b52f-4001-a1ca-71cb919e5a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:cb:c5:60:95:e6:c1:2f:64:e7:8c:da:35:
                    d2:86:64:42:34:ec:7a:56:7a:99:6c:09:3b:6b:df:
                    06:6a:06:87:6b:31:50:0f:ee:43:3f:ca:32:d9:15:
                    f2:75:f6:63:7e:d2:50:4c:e4:40:11:81:15:ee:67:
                    db:0c:b3:ba:3b:36:e1:42:f0:e2:5f:81:82:a5:58:
                    92:ae:be:d9:22:07:bb:f3:b7:c3:ce:2b:ae:76:08:
                    51:c6:cd:72:0e:33:bf:ac:78:c2:be:cd:fa:9b:6d:
                    ee:be:b0:22:e6:c0:e6:1b:e8:79:f2:f3:04:4b:21:
                    fc:2d:9a:88:7f:8d:ee:d4:34:5c:bc:32:07:2b:df:
                    43:f4:0d:4b:50:e4:90:4d:65:c7:3b:c2:15:ba:90:
                    66:a2:74:ed:03:75:7d:ef:cb:4f:57:5a:ec:f6:1c:
                    fe:65:d6:7e:7e:6e:bf:75:f1:80:bd:1f:e0:3a:7b:
                    c8:9d:f9:56:dc:81:0f:53:ba:bb:2a:28:49:e6:26:
                    6f:06:c3:11:c6:4f:65:58:db:50:1b:60:ce:26:e9:
                    d2:0e:42:61:fb:76:31:25:32:8b:d9:ce:f8:c4:dc:
                    9e:8a:03:ca:4d:03:fb:3f:2a:b4:51:03:a9:e7:de:
                    01:20:9c:52:b0:ae:69:ce:f2:98:ab:52:8f:a4:52:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AE:9A:CB:7D:2A:A3:C8:6A:59:59:D8:6E:70:CC:54:2B:68:11:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/934c3009-2179-3b26-b734-0b38a08550d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:0e:e9:30:d2:f8:23:fa:69:0d:b7:73:2d:2f:a6:91:0f:
         66:47:0b:4b:38:61:66:70:98:72:ba:df:ea:98:79:d8:12:d4:
         79:49:b6:17:7d:82:92:94:5a:5a:cb:c5:c7:2e:f0:0c:3c:79:
         f5:78:28:72:22:14:77:25:3a:54:67:d9:45:50:de:ff:96:3c:
         d8:75:ca:71:6c:a1:96:bc:63:be:c8:2e:c6:49:f0:20:2a:ef:
         a1:c5:bd:c8:a8:ad:8c:9e:83:cc:db:fa:75:0d:44:02:24:07:
         87:f6:a3:e5:b7:b0:50:1c:ad:9a:9b:19:46:b1:0d:20:9e:f2:
         c1:a0:24:dc:82:05:71:38:73:1d:7a:da:d1:30:85:ff:91:62:
         c6:b8:f4:99:b9:34:33:ad:fd:14:95:f1:35:59:5c:a9:8a:4f:
         9c:85:8d:14:6e:4e:d1:44:5a:4e:59:87:94:8b:6f:5a:de:b0:
         d5:ef:0d:c7:c0:60:e6:d1:db:6a:e3:92:e7:22:af:df:44:be:
         28:97:87:b7:27:b1:68:43:7e:a7:f6:ee:b0:33:a7:41:d2:8d:
         8c:cf:af:c0:30:c1:a3:65:b7:e7:9a:d9:51:30:8e:69:f8:96:
         9f:88:82:57:51:05:b3:9f:f7:df:d8:5d:6b:e0:9a:dd:58:c6:
         a8:47:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:34:47 2025 by rpki-client