Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa
File:                     b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa (raw, json)
Hash identifier:          pIK7e/EahtjGUpenJp4dtt1WxSm1lI6ZJNxkfS7Yyrg=
Subject key identifier:   82:84:61:06:59:A4:3D:2C:D5:E3:D9:82:93:10:61:89:A8:02:82:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D52BC58EBD2F1F6299740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa
Signing time:             Tue 03 Jun 2025 20:05:35 +0000
ROA not before:           Tue 03 Jun 2025 20:05:35 +0000
ROA not after:            Mon 01 Sep 2025 20:05:35 +0000
asID:                     6167
IP address blocks:        2600:100e:b250::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:52:bc:58:eb:d2:f1:f6:29:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:35 2025 GMT
            Not After : Sep  1 20:05:35 2025 GMT
        Subject: CN=6bc404a6-16fb-49e4-aada-e97db832defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:56:b1:e8:3c:44:20:b5:f8:47:25:67:b1:
                    8b:7f:18:de:eb:ee:bf:81:55:9b:4e:c9:0a:df:f9:
                    7c:6f:09:2d:3b:98:fc:b1:48:56:d3:e7:ba:5a:5b:
                    27:73:b5:3b:88:e2:f8:99:b1:7a:47:c0:23:71:71:
                    4f:8b:4f:ab:6e:b1:63:13:12:d8:4d:1b:e8:77:47:
                    93:d2:ea:99:18:8f:b3:fe:58:80:63:fb:32:ce:cf:
                    c9:be:39:34:82:a1:c5:f5:ef:88:cc:8f:08:4e:f6:
                    e5:a6:e5:bd:c3:97:51:91:36:ab:d3:98:22:4a:97:
                    13:e7:dd:4d:f7:99:e1:21:2d:97:8b:2d:3b:43:a2:
                    14:fe:7c:de:25:38:9e:67:6e:71:c2:e1:cf:65:32:
                    bf:05:29:bf:3b:3a:75:59:e2:72:68:ae:bc:a4:c0:
                    0f:ad:d1:9e:f2:bc:8d:e6:f3:d9:8f:7f:12:2f:8c:
                    e3:67:fa:29:32:59:b7:fa:88:bc:20:a5:3b:f3:c6:
                    b6:53:48:75:38:93:ab:65:c0:8a:51:17:2f:74:13:
                    cf:2a:1c:eb:57:a3:fa:06:c6:49:7a:7a:fb:fe:b0:
                    b4:f1:74:5f:51:1c:0e:2c:6a:dd:a3:05:ca:f6:2e:
                    b7:b2:75:70:57:90:cd:82:68:7e:77:fc:53:69:b0:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:84:61:06:59:A4:3D:2C:D5:E3:D9:82:93:10:61:89:A8:02:82:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:11:f8:b6:3a:84:40:8d:57:44:aa:e1:41:b9:b4:03:8c:9e:
         72:a4:3b:44:a8:2c:76:d3:4e:5e:92:1f:0f:0d:20:6b:03:a8:
         f3:b1:6a:50:a7:36:7e:04:1d:91:d9:9e:5d:a6:c6:f7:76:08:
         27:b9:89:90:84:e0:e0:d9:62:e5:93:29:bb:6f:8f:38:37:4e:
         74:d7:fa:14:58:73:50:2a:2a:d1:34:3c:c2:7b:77:4f:37:b5:
         1d:e2:a5:37:4c:7f:40:81:3a:14:d7:a1:7c:ab:e9:98:f9:ff:
         8e:37:fc:49:dc:dd:34:1e:8c:ab:9e:3e:0b:c9:4e:03:2a:e5:
         eb:9d:39:af:2c:b0:81:bc:ab:7e:3f:94:91:de:d3:0c:4d:e2:
         80:ea:32:53:8b:12:ae:59:09:34:20:86:c1:0f:a3:a6:d9:7c:
         65:50:7c:8d:d7:b2:d0:3d:a8:a4:9e:1a:8d:e3:6e:f2:0f:38:
         3b:f0:15:07:98:78:23:bc:b2:b4:51:45:e4:7c:3a:9b:d9:43:
         b9:37:3b:01:87:8e:3b:d6:b4:13:2a:e5:07:a3:5d:f2:0c:a6:
         35:36:f5:ef:00:f2:78:81:24:df:a4:38:3a:e9:37:4e:08:94:
         e9:d5:27:e1:98:67:e6:30:88:d3:5e:8a:d7:9d:01:c8:1d:d5:
         3a:26:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:06:24 2025 by rpki-client