Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7719e04-fbb7-3236-add2-a1a5d3f8df41.roa
File:                     b7719e04-fbb7-3236-add2-a1a5d3f8df41.roa (raw, json)
Hash identifier:          sZI4UxMLLA1mL1yD/c22nrctBWVhVivOR0QOuOglIN8=
Subject key identifier:   B2:11:54:C2:6A:7B:01:84:4B:C2:83:94:A7:61:CD:7C:AB:EB:09:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A612B1FEB7470FCC9A8F01480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7719e04-fbb7-3236-add2-a1a5d3f8df41.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1005:a127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1f:eb:74:70:fc:c9:a8:f0:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=57549564-3a74-423f-89b5-b883343f1c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:28:5e:2d:c1:43:0f:85:6c:c5:86:ba:7b:
                    1c:0a:a1:f0:48:75:72:1f:74:94:ab:9f:db:80:02:
                    ad:54:d9:70:3a:ee:1b:fc:77:6e:27:d3:da:a2:9c:
                    01:14:c9:9f:bc:5f:84:1d:1e:78:e4:6c:77:c4:04:
                    56:94:59:c7:62:f3:2d:49:66:f9:61:00:0a:94:18:
                    e7:09:e0:e3:10:26:a1:89:02:58:e9:3d:6c:3f:62:
                    58:2c:ed:69:0a:c2:b4:6e:6f:9b:3d:5b:b3:06:f8:
                    f4:57:26:3f:fc:94:70:8e:47:b3:63:f2:31:11:de:
                    47:3b:42:48:9a:25:41:5c:b8:ab:9b:24:ed:ca:79:
                    45:6a:e1:9d:9b:e7:d0:b0:2d:0e:2b:98:52:de:86:
                    f2:1a:32:fa:77:fe:69:0c:a3:cb:51:3b:81:6e:f0:
                    3d:e1:c0:2b:6a:5b:9e:01:2d:45:af:48:8f:bb:c2:
                    de:2c:11:8c:8f:ae:bc:09:ec:48:e7:7e:df:eb:92:
                    01:d3:06:94:27:06:b3:09:7f:7e:e6:be:92:d1:32:
                    83:df:38:b2:a5:e8:b8:9d:dd:1b:9c:06:0c:d8:43:
                    3c:49:46:03:cd:be:c1:7e:2c:37:4b:f0:22:bf:3e:
                    5f:57:cb:54:90:65:a0:e8:bf:33:9f:d8:35:e5:2b:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:11:54:C2:6A:7B:01:84:4B:C2:83:94:A7:61:CD:7C:AB:EB:09:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7719e04-fbb7-3236-add2-a1a5d3f8df41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:30:1b:4b:0f:5c:c4:1d:c7:b2:6f:2b:16:71:99:14:d1:d1:
         ca:21:84:08:27:1c:63:f2:c3:91:32:dc:f6:14:c5:61:15:ba:
         87:05:78:b6:fc:8a:ec:bf:9c:22:0c:b5:a4:45:ba:36:7c:90:
         4f:83:c9:6e:e7:fa:34:6e:58:42:4e:f1:5b:a3:ee:94:54:59:
         5d:c8:88:61:b9:5f:31:8a:9d:c1:89:89:fa:39:94:c2:3f:18:
         51:96:5d:22:64:bc:6f:75:53:f7:4a:64:bd:9f:32:f2:af:bd:
         de:44:9d:e4:db:f2:bd:cd:f7:73:a6:e1:63:ff:f6:90:c9:e2:
         f4:84:5b:62:50:0b:29:f7:25:74:ba:d2:81:05:e4:8d:88:01:
         b6:19:03:7e:d9:62:75:14:9e:8f:96:36:65:68:a2:93:10:fd:
         41:e9:52:3e:98:8b:dc:42:4c:e5:f5:af:96:83:45:62:82:de:
         e5:19:33:03:76:99:83:7c:85:03:65:8b:3c:bd:24:54:83:e9:
         c9:49:ac:00:af:d1:87:f4:77:d6:70:64:65:5c:2f:85:d4:f2:
         3c:b2:f3:6f:94:34:d2:54:7a:eb:89:8a:f9:86:d3:96:01:48:
         43:63:50:1a:ab:50:ab:f8:45:d6:ae:ff:cb:84:b0:46:65:3b:
         9e:76:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:26 2025 by rpki-client