Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f3180b8-f3ab-3a47-bf20-f157c27035dd.roa
File:                     9f3180b8-f3ab-3a47-bf20-f157c27035dd.roa (raw, json)
Hash identifier:          u4oXTmlnYE546/H4fCbmLk4gIZI/K/1olLt/EjjGBbw=
Subject key identifier:   4D:DA:9F:8B:BB:CD:8B:C7:8D:DA:DA:CA:12:9A:CE:4D:42:30:EB:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BCA95950B1AD197CC4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f3180b8-f3ab-3a47-bf20-f157c27035dd.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1005:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:bc:a9:59:50:b1:ad:19:7c:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=6aeb02cf-95f9-4199-879c-3f6243139788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:e6:ac:b9:d2:23:e0:43:ae:9a:d4:af:a7:
                    bb:a6:2b:b7:30:eb:b9:e2:71:bf:97:27:25:f4:b4:
                    23:98:ca:8d:9a:4f:05:25:40:d2:2a:19:47:3b:9f:
                    c9:e2:e9:5e:ad:10:d2:f6:e1:59:0b:42:c2:ef:49:
                    aa:96:c5:e7:ac:18:05:7c:2f:f2:ba:2f:1e:50:7f:
                    9c:e9:a1:0f:e6:e6:76:5c:3b:68:35:da:97:92:94:
                    05:a3:a4:f1:ba:30:e2:66:fc:78:80:9a:ff:9f:ac:
                    e2:c2:7d:eb:11:b6:b2:12:4c:8c:27:02:dd:fc:93:
                    60:15:3e:78:b4:04:4f:fe:19:90:11:ba:06:7a:7a:
                    6d:74:76:37:ba:df:c4:79:d3:76:e6:c8:db:e7:d8:
                    38:30:2f:4a:5b:12:d9:e5:37:c7:1a:2f:fa:f7:b7:
                    c2:f3:f0:bc:49:d4:e1:cf:9f:c7:6b:3d:86:d0:18:
                    df:e3:d5:c4:39:0f:77:64:3e:a5:90:37:77:11:cb:
                    85:8c:e4:ca:e5:51:53:0a:4f:19:d2:8c:67:c1:7e:
                    52:fe:07:70:26:9f:a5:13:7a:c1:3e:55:b7:db:f9:
                    25:c9:5f:2d:0e:e1:4d:08:37:fc:92:33:58:29:22:
                    95:9d:62:9f:c3:a7:16:4d:db:4b:70:bb:44:59:45:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:9F:8B:BB:CD:8B:C7:8D:DA:DA:CA:12:9A:CE:4D:42:30:EB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f3180b8-f3ab-3a47-bf20-f157c27035dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:83:37:99:76:f2:ed:e2:ae:06:44:4b:53:df:b0:38:af:
         05:85:24:0f:a3:99:01:52:29:40:32:08:05:3b:82:00:3e:96:
         27:51:10:0c:8c:e2:fa:e5:93:31:2b:aa:92:9b:3b:71:5a:cb:
         8f:25:52:20:48:96:3e:d8:0f:73:09:d7:32:0a:68:dd:e9:f1:
         91:5c:ea:3a:c3:80:ee:c5:61:7f:62:87:ca:af:1c:40:77:b1:
         25:bf:2c:46:27:92:f2:c6:0f:a0:a5:c4:fd:33:56:89:a7:5c:
         69:af:10:dd:39:47:eb:59:4d:51:d7:9e:77:50:69:23:e3:17:
         61:0b:48:74:74:d0:77:9f:be:0d:ef:c1:ae:96:19:cb:5f:8c:
         5a:e3:7b:6d:15:c4:81:28:89:89:39:73:fc:bf:14:b4:ee:ff:
         d6:c3:74:30:e0:6c:8f:2e:f1:a3:72:47:90:73:2f:05:b1:e0:
         2c:55:f1:c4:df:7c:b5:99:12:92:58:df:63:8c:5d:a7:82:cc:
         0f:a6:e9:f2:77:ee:e3:39:88:7f:e2:a4:92:f8:f9:88:5d:25:
         2c:80:ba:63:c0:5d:62:74:b9:64:dc:6b:0e:10:df:c1:89:9a:
         c7:1e:c8:0d:f2:e2:6a:3f:60:93:16:ab:64:81:b2:86:02:74:
         f2:28:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:14 2025 by rpki-client