Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a9c47e-fa09-30d2-a8b7-da7217c36fe1.roa
File:                     c0a9c47e-fa09-30d2-a8b7-da7217c36fe1.roa (raw, json)
Hash identifier:          Uzj31Dja4v/e+0EDpsjTBoaXsV02d1tfC6zyzY7bBhE=
Subject key identifier:   7F:D9:D8:DC:67:E8:24:80:42:D9:B7:EE:FC:9B:71:8D:5A:D1:39:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8575EFCCBA2CB3CF36412BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a9c47e-fa09-30d2-a8b7-da7217c36fe1.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1010:be00::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ef:cc:ba:2c:b3:cf:36:41:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=4bc8d465-e8d8-4a13-918e-d2ac14f48e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:6f:89:0c:62:71:8d:f2:13:c6:11:5e:9a:
                    9b:53:41:82:d2:0f:4c:fd:32:58:d0:9c:79:4e:c3:
                    da:bd:c8:8d:53:ab:87:9a:6c:73:32:35:cc:a9:b3:
                    14:bb:01:d9:bd:f6:20:d0:b9:92:ad:e5:d0:7a:f7:
                    29:fc:20:f3:85:5b:0c:9f:c4:61:5e:dc:b1:bf:5e:
                    f5:ef:46:bd:d8:80:36:29:09:1d:04:53:de:6d:57:
                    06:92:ff:b1:b4:6a:96:54:69:3b:8b:65:a6:c1:a8:
                    ae:b4:dd:ed:2d:0e:de:3c:92:3a:1f:6f:b9:7a:99:
                    3a:d5:10:1a:be:f4:2e:11:53:36:88:79:32:4d:75:
                    ac:30:f6:f9:b2:86:bf:85:3b:00:93:5c:17:ee:77:
                    06:e9:1c:2c:06:c9:58:e4:8d:17:a5:df:15:5f:29:
                    2d:7c:1b:97:b2:d5:14:e5:6f:47:04:98:b4:c4:f2:
                    5c:7e:14:d5:19:5f:d5:9c:d1:87:77:9f:77:15:d9:
                    ca:56:db:11:b1:fa:75:86:9a:ce:99:c3:02:6e:b5:
                    b9:01:90:c4:45:44:8d:4b:41:8d:b1:ad:de:fc:74:
                    f4:c1:78:fc:f0:1b:5b:00:d3:d2:ae:c7:86:0f:d2:
                    d0:f3:b7:ae:00:8e:d0:e8:8d:3c:fc:c9:fd:85:d2:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:D8:DC:67:E8:24:80:42:D9:B7:EE:FC:9B:71:8D:5A:D1:39:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a9c47e-fa09-30d2-a8b7-da7217c36fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:be00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:78:57:52:d2:b4:be:50:e8:de:00:a0:2b:cf:c2:9a:32:d2:
         95:8f:d7:af:57:2b:14:20:74:97:33:64:c4:83:f0:1f:f0:d8:
         fb:16:43:ff:af:9a:5e:cd:a3:70:f5:7c:1d:ac:17:ed:2e:a6:
         ee:68:5c:56:4d:57:6c:7b:09:a8:be:c1:a0:25:42:d9:c6:9f:
         18:77:a8:70:ff:b5:78:62:4c:2b:a7:4b:b6:29:5d:62:70:de:
         ed:ca:2a:ef:7e:12:66:fc:62:64:70:37:54:19:62:c5:96:39:
         aa:3e:96:af:01:ae:cb:7c:7a:80:b6:67:77:58:31:9d:a5:02:
         14:97:2f:9a:90:2b:eb:2a:a0:95:ca:13:89:21:33:16:47:30:
         74:20:52:1d:74:f6:ca:25:62:14:32:81:5e:f5:70:24:65:78:
         24:b0:f5:2c:13:99:40:f0:f2:58:c4:8f:9e:89:d7:85:58:7a:
         f2:17:66:83:8a:2b:74:fd:94:2e:ed:11:8e:71:1a:b2:57:51:
         6c:50:2b:4d:6c:41:ee:e1:a7:05:c8:4c:ab:2e:c8:90:30:24:
         b5:3c:ae:b4:0d:18:d1:20:b8:f0:fb:3a:c9:9e:be:96:e7:2d:
         14:d4:11:e0:af:74:0e:0f:7a:37:60:0a:45:ff:30:31:fb:46:
         ba:dd:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:53 2025 by rpki-client