Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfd0ad20-91b4-3261-a8f8-aeda0fe23a9f.roa
File:                     cfd0ad20-91b4-3261-a8f8-aeda0fe23a9f.roa (raw, json)
Hash identifier:          EvZ7EuveTAoMqQRkX3xCgqhmhG03xl5V4wQhVgngHkY=
Subject key identifier:   B1:86:3B:83:90:1D:73:0A:F2:33:3F:7B:5B:A1:CC:57:D3:E8:61:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15E9F34C5D96280417B340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfd0ad20-91b4-3261-a8f8-aeda0fe23a9f.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1003:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e9:f3:4c:5d:96:28:04:17:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=48048616-ec9b-4898-ade5-2d72ea8c48a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:64:c5:ef:17:33:9f:9b:84:be:b4:6d:d7:
                    50:8f:21:db:19:1b:b5:e8:c4:1c:4f:bd:2f:85:5f:
                    0a:d2:e7:3c:e4:64:50:d5:a7:f6:bc:ca:20:bf:f5:
                    4a:00:c6:34:c7:f1:69:b2:32:96:5e:e7:57:ba:d4:
                    ba:9a:45:46:fc:01:38:ed:a5:f3:a1:d5:d3:95:f5:
                    3e:ec:25:64:0d:fb:e7:a8:53:64:79:67:37:d3:de:
                    c5:b0:89:4c:b3:51:e0:5e:f4:a1:c6:24:e3:5b:a0:
                    3f:07:5b:cd:24:6a:e6:2f:b8:b1:22:70:08:64:f9:
                    61:52:9f:bb:46:20:cf:82:70:25:71:26:d3:a0:ad:
                    64:e9:de:b0:e8:65:27:9a:39:71:0f:bb:b1:c5:41:
                    93:05:9a:5a:c9:31:3f:17:38:70:0a:47:25:33:78:
                    85:4a:18:19:44:67:c7:00:44:0e:ae:0c:0c:b9:f0:
                    3d:00:ee:c4:46:83:3b:9d:ef:27:4a:be:fa:01:8b:
                    2e:05:23:0f:d0:f7:d0:f9:bd:f6:0c:c2:66:27:4f:
                    44:c6:9b:6b:08:67:28:11:41:bf:b0:1c:ec:bc:32:
                    63:a2:d8:83:69:7c:da:b0:0b:da:ee:10:b1:4a:d4:
                    a6:40:89:61:7b:54:d3:53:8c:82:1e:7e:bd:03:5d:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:86:3B:83:90:1D:73:0A:F2:33:3F:7B:5B:A1:CC:57:D3:E8:61:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfd0ad20-91b4-3261-a8f8-aeda0fe23a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:d9:7a:a8:de:a3:63:82:f6:9e:32:75:59:b7:7a:6f:35:
         c4:c4:cb:a1:a9:1c:62:5c:67:1a:52:eb:d9:27:9c:9f:3d:93:
         ee:8a:5b:c7:e5:0c:87:86:db:be:0e:01:d6:ce:54:1b:3e:1c:
         d9:27:dc:f4:e4:05:5e:94:92:36:d6:a8:bd:57:ee:ca:37:e3:
         f5:b5:32:de:7e:c1:52:b1:2e:98:51:eb:86:d1:70:81:ec:d1:
         1c:13:5c:44:64:9b:96:26:68:66:ed:34:1b:49:5d:0a:f1:c8:
         1e:7d:cf:9d:8b:00:06:f6:81:ea:0d:be:b2:4a:4d:25:83:12:
         cd:31:c3:f8:14:4e:d6:11:7d:4e:be:3e:c2:a8:16:ca:b0:ec:
         7f:e8:73:8f:09:c0:85:a9:4f:6b:aa:4a:b1:9a:18:28:a2:9f:
         dd:1d:f5:4f:c0:41:e9:84:d7:1c:7c:f3:09:cf:b6:86:85:e9:
         20:5c:42:17:b5:b9:61:e3:48:f6:e2:7b:86:20:06:5d:d6:6f:
         ff:97:94:a4:d8:8c:35:b0:c3:5e:3e:f5:75:da:d4:9e:d3:6a:
         a2:de:81:1c:3b:79:31:54:51:52:e6:f4:c1:c5:88:05:12:c5:
         cb:58:d2:cc:db:a7:c9:e9:dd:d6:20:f1:27:27:a1:5c:f3:22:
         29:0f:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:01:34 2025 by rpki-client