Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a67094a-4474-3bc4-9bd0-2d2a9ac35c65.roa
File:                     9a67094a-4474-3bc4-9bd0-2d2a9ac35c65.roa (raw, json)
Hash identifier:          uafDdOb7v6himmsk6TU35+lFhkjvqxI9DTfj9J2PUd8=
Subject key identifier:   5E:68:F5:19:BA:E6:5F:41:71:4D:FB:EA:E4:F3:EE:EA:E1:30:F4:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8575EE266DBABFCB001E99A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a67094a-4474-3bc4-9bd0-2d2a9ac35c65.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1017:a411::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ee:26:6d:ba:bf:cb:00:1e:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=b5580eec-05ec-4a59-8ef8-a92730bc1c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:b0:91:98:37:14:0c:8c:1a:16:b1:ec:1a:
                    00:aa:6c:41:d5:dc:c1:0d:f5:00:f2:e5:e9:94:d7:
                    68:e1:db:5c:72:d1:ea:dc:20:bd:98:20:c6:b3:28:
                    fc:b0:7b:4b:04:42:3d:32:7d:97:68:c8:86:14:05:
                    34:31:02:2b:23:aa:b6:1a:b7:ec:b7:ed:a0:f9:e2:
                    c9:21:32:85:26:28:58:ee:a7:ae:52:88:5f:9c:cf:
                    49:6e:dd:28:e4:bb:ab:cf:b7:30:23:dd:e4:94:28:
                    7c:d6:a0:ef:51:fd:c9:1c:39:aa:32:3e:11:b9:fe:
                    7e:16:af:99:a5:c6:e3:a0:c1:0f:a5:4c:3e:53:dc:
                    08:b8:b4:24:75:a1:2a:e4:41:dc:e6:42:43:d4:d6:
                    9b:00:7b:2a:8c:7c:72:ff:a8:79:9b:a3:a7:0c:f5:
                    2c:b1:54:6c:8a:ca:a6:cf:b1:c5:ed:7f:1d:4f:5e:
                    54:74:d7:d6:b7:84:1b:2b:46:01:1d:ca:97:a4:2f:
                    5f:84:ed:75:0a:d4:af:2d:f9:d9:b4:54:c3:e5:8c:
                    dd:46:c6:14:e1:15:3e:48:43:22:0f:27:28:fa:28:
                    e4:94:f5:85:e0:93:3b:11:69:7e:a8:55:a3:4a:af:
                    98:0f:a3:11:7c:80:0c:8d:1e:13:4b:75:e4:af:0d:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:68:F5:19:BA:E6:5F:41:71:4D:FB:EA:E4:F3:EE:EA:E1:30:F4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a67094a-4474-3bc4-9bd0-2d2a9ac35c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a411::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:1a:76:30:bd:31:5a:49:72:29:c0:cc:28:09:6d:1f:00:
         cd:24:5b:28:c1:89:99:87:b4:47:c6:d0:d0:a3:f0:44:0c:57:
         76:69:a6:ab:05:51:0d:f7:d7:55:d7:ab:d8:d5:a0:ad:4d:ad:
         94:f1:03:eb:2b:e2:9d:a0:08:ce:b8:2e:6e:d7:c0:b7:01:36:
         a3:55:01:c4:fe:17:78:c4:94:5a:1d:31:ff:8a:58:b0:33:68:
         a4:c9:a3:2d:93:06:b3:cc:6c:14:d6:48:80:bd:59:05:0d:24:
         a7:01:72:5c:37:00:db:f5:f1:95:ca:5c:6f:df:43:dc:e4:bc:
         d3:cc:77:6d:19:f4:be:ae:6e:42:85:fe:2e:f1:e1:9a:bb:cf:
         0e:cb:bd:32:38:5e:8c:2f:39:0c:5e:a9:2d:da:f2:8b:6f:79:
         10:ad:3a:3c:e0:2a:fa:19:ac:5d:61:d4:08:f3:c0:5f:05:2c:
         a3:f4:9c:1f:c1:9c:ba:32:61:f7:0b:c1:5e:d9:46:7a:87:76:
         97:1a:dc:60:96:c9:19:4f:a4:c1:36:d4:8f:47:e6:af:cb:82:
         75:29:50:43:0e:bb:5f:07:5f:9e:ea:9a:0e:1a:74:3a:a2:6b:
         19:ab:be:ec:07:4b:be:28:81:d0:41:7a:b7:82:5f:57:ae:52:
         f3:63:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:21 2025 by rpki-client