Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa
File:                     e026c296-9368-3f5a-bc5b-819e35a615a6.roa (raw, json)
Hash identifier:          PHCQ82SQEo1PXN88YIXEZh5WscFW3gidA9pehs/PCzo=
Subject key identifier:   50:0F:EA:F7:8F:67:2B:29:1D:90:10:5F:2C:F9:D7:48:6A:CE:9A:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8DD5FFA5F7D46E9FDB9747C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        2600:1009:a024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:ff:a5:f7:d4:6e:9f:db:97:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=c9746dc6-2791-4ce5-9601-47501ae5ec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:b2:8f:38:67:68:34:46:0b:22:b0:f9:09:
                    73:2b:ab:7c:1e:ea:fb:3a:d3:ad:5e:ca:c2:60:58:
                    60:5a:63:9e:70:9b:de:45:ca:85:d5:a1:34:31:19:
                    b1:60:f5:b5:45:7a:2c:c8:c0:b0:42:e1:62:13:e8:
                    eb:72:41:52:59:a6:b8:a1:5c:ad:d6:85:03:1f:27:
                    ed:4b:f8:9b:3b:22:35:c6:8f:99:c0:6f:52:0d:ab:
                    ee:cc:74:17:35:6b:3a:74:db:dc:2b:10:72:3f:5d:
                    cd:53:b3:b0:00:94:68:95:82:10:c2:97:df:3d:cc:
                    bc:29:1d:68:54:fe:85:98:1e:82:02:8f:90:b6:5a:
                    22:d0:ac:a4:db:65:d0:a3:6b:46:0e:58:db:25:a5:
                    94:27:9e:81:e8:57:87:63:28:3d:be:ea:1e:69:85:
                    ed:56:ef:7a:b2:49:fa:f8:63:e5:14:68:68:1f:80:
                    05:eb:ed:5e:29:bb:5f:0a:93:a4:2e:07:67:19:eb:
                    ff:45:91:a2:dd:92:0e:4e:ad:53:ad:17:61:b6:1e:
                    ae:bf:53:2e:0f:d4:51:a9:22:92:cd:1d:eb:d3:95:
                    85:a7:7a:27:6e:b0:fe:95:98:0a:38:6d:ca:6f:2d:
                    a4:8b:0d:5b:8d:ad:bf:0c:82:8e:20:bb:6e:15:05:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:EA:F7:8F:67:2B:29:1D:90:10:5F:2C:F9:D7:48:6A:CE:9A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:9a:62:39:4f:07:10:58:5f:47:7c:b5:d9:fb:02:eb:3e:
         04:16:10:87:5d:2a:78:2d:48:f3:9f:19:8f:89:86:74:16:e0:
         86:0b:ed:41:8f:b7:29:7c:a7:de:77:96:31:81:43:a7:17:75:
         e6:3e:96:34:ed:a2:b5:78:c1:28:2a:f5:e3:bb:73:cf:f9:ea:
         72:c3:f1:ac:cc:8d:8a:fc:e0:20:41:6f:c7:aa:49:8d:ae:64:
         0f:cb:71:da:f8:5f:4d:61:e3:bf:60:03:c2:6e:8b:37:fe:12:
         5d:43:f1:80:a0:3d:79:3d:78:d8:5a:5a:ed:80:7e:f0:ad:fb:
         26:59:85:32:da:59:05:62:0a:11:2f:d8:f8:2e:16:c1:29:b2:
         10:5b:ac:b0:ea:c1:f9:60:30:1c:1a:14:ab:e4:47:98:07:88:
         c2:b4:44:02:05:2e:dc:16:7f:fa:88:bd:0c:bd:70:29:00:21:
         35:c5:40:68:c7:73:09:3f:d0:0e:79:e3:98:b7:22:54:0d:a0:
         36:f4:69:d7:71:6e:49:34:ff:ff:11:d4:ca:9d:b3:f8:ab:08:
         b2:f2:4e:0d:51:38:e2:43:dd:a6:eb:65:8b:aa:f0:8b:0d:0c:
         7b:ab:8a:8e:e5:e7:85:f9:e8:9f:8b:c1:45:7f:d0:d5:41:28:
         a8:7d:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:54 2025 by rpki-client