Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bccdd352-3f9c-372b-b209-4a8d938baeeb.roa
File:                     bccdd352-3f9c-372b-b209-4a8d938baeeb.roa (raw, json)
Hash identifier:          WVoByOk9t3MJv5FLb8bKsLjgZDMbUP+viR4xJy9YuI4=
Subject key identifier:   E3:CE:D9:27:A4:42:FB:6A:48:B9:42:62:80:75:CF:04:30:4B:8F:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8575FC6E64C3D901E0C22280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bccdd352-3f9c-372b-b209-4a8d938baeeb.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1010:be08::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fc:6e:64:c3:d9:01:e0:c2:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=629b3b86-3fa4-4861-9c1a-9a40643575f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:e5:9c:1c:ef:b9:58:bd:2c:3d:4d:11:cb:
                    8c:f3:82:db:cd:f7:65:d0:55:ef:61:74:5f:00:ef:
                    40:77:d4:26:72:4f:38:ac:7c:1d:9a:56:6f:21:dc:
                    bf:cd:b4:af:80:d9:32:23:6b:b8:e1:16:4b:50:82:
                    6e:1e:57:9a:9b:e5:78:1f:0a:a0:d4:a6:73:cd:3f:
                    47:70:84:78:59:7f:f6:e4:5b:e7:1e:e4:eb:94:d7:
                    7a:b7:a8:e7:f7:4f:88:14:c6:d7:db:27:17:dd:8e:
                    3a:01:29:cf:f8:1d:d8:ed:4d:98:47:30:a6:e8:5e:
                    97:f4:21:06:2d:ea:61:41:dc:70:63:81:1d:9c:48:
                    3b:0d:12:5b:ec:9b:28:d5:cd:f5:4c:a8:32:a1:cf:
                    1c:b0:23:c9:c3:06:8b:b9:10:63:d9:7b:24:1a:3d:
                    e6:16:01:cc:cb:6a:8d:de:34:1b:3d:ec:c8:4f:d8:
                    f5:47:71:60:d5:28:eb:4e:ce:a1:0d:a3:fa:e3:b4:
                    dc:3c:d3:0f:06:7b:8e:46:c5:15:fe:eb:13:73:f4:
                    f5:59:54:5b:0e:6b:68:47:ac:25:36:27:03:e5:c2:
                    77:f3:31:20:9a:75:e6:f9:17:03:a1:76:4a:bb:36:
                    ce:fe:9f:69:01:cc:c4:7a:37:da:0b:b8:95:a3:ae:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:D9:27:A4:42:FB:6A:48:B9:42:62:80:75:CF:04:30:4B:8F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bccdd352-3f9c-372b-b209-4a8d938baeeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:be08::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ff:27:cf:07:f4:ac:ce:4f:17:6a:ef:63:28:60:9e:f2:1f:
         ac:be:76:d3:77:6f:db:e9:ca:78:3f:14:09:15:09:7b:50:48:
         0b:50:67:44:00:de:7c:7b:19:3e:ab:28:06:c0:02:aa:21:9a:
         a8:ef:a9:c2:83:b8:e9:cd:67:fc:fd:78:74:53:1b:a3:a7:c9:
         b8:10:82:59:95:75:66:15:01:f8:77:95:88:6b:be:b8:7a:0a:
         84:58:e9:1b:20:81:84:9c:fe:a3:ff:3b:95:67:d0:f4:2b:31:
         d1:47:3d:74:91:83:fc:ce:ea:a1:a8:a7:e8:e7:0d:87:70:7a:
         ba:87:da:6f:b0:2b:f6:03:42:76:1f:06:ca:79:d9:28:15:42:
         8c:11:91:de:87:c9:f4:98:f2:a9:97:61:9d:ea:57:e2:68:57:
         ef:97:cb:47:b8:de:21:55:95:02:2b:d8:fb:f9:9e:e0:c2:91:
         9e:1d:bb:2e:d7:d0:bb:52:05:e8:76:fe:95:35:91:72:8e:b0:
         28:55:86:b9:76:b3:c2:fe:3c:88:ed:09:6b:43:9e:bd:37:97:
         d7:46:db:1f:3e:ea:f9:ac:3b:ed:08:8d:c8:83:8c:52:83:68:
         19:59:37:ab:78:85:3f:73:75:32:d5:4b:bf:69:32:93:d9:c2:
         83:e0:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:04 2025 by rpki-client