Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd71157-37de-367e-9361-7794e2b647e6.roa
File:                     fdd71157-37de-367e-9361-7794e2b647e6.roa (raw, json)
Hash identifier:          iCNsv/ZCcYYne8iexWWLxLlMus+PcZjQbyh469AzAZI=
Subject key identifier:   45:FE:C9:DB:BC:94:C3:08:85:B2:04:1D:14:6C:68:F7:86:56:9F:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295581F9C3FF5B38E2A6C500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd71157-37de-367e-9361-7794e2b647e6.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1014:b310::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:81:f9:c3:ff:5b:38:e2:a6:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=71bf482a-dd26-4b04-9b66-87f1fa9af25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:36:e3:e7:31:f4:58:d7:ea:b3:35:41:50:
                    3e:c2:72:9b:13:ec:18:bc:6e:e7:d9:f7:d9:9d:4e:
                    b5:03:d3:8c:ab:7d:cd:60:b8:b9:27:20:35:e0:ce:
                    3d:27:70:04:d5:8d:b3:6d:ca:4d:9c:21:4f:fe:48:
                    8e:84:2a:c9:2b:25:c6:58:f9:c6:44:1e:ac:8f:8a:
                    12:57:47:23:82:7e:ab:49:17:1a:aa:87:dd:09:5b:
                    b8:9c:31:62:f8:f9:08:0c:95:37:8d:a1:cb:be:d3:
                    8e:21:f1:dc:b5:35:01:a9:ac:b2:36:c9:4b:96:2d:
                    1a:82:10:3f:3c:b3:53:0c:23:b6:53:19:9d:5e:49:
                    e9:f0:eb:e2:0a:a7:2d:57:4c:b7:12:a2:ed:68:e3:
                    91:6d:1c:58:81:40:be:67:92:4b:ee:5b:cf:59:a5:
                    e7:a9:3b:b5:ef:ec:87:8e:87:c4:fb:97:fb:1b:40:
                    ec:ba:98:bc:0b:f8:47:94:a9:c2:17:e5:67:6d:d3:
                    53:7f:bc:31:4f:7e:07:43:c1:9b:eb:f4:07:5c:07:
                    dc:d6:11:e5:c4:78:58:03:be:19:9c:df:90:a2:d4:
                    f1:79:0e:08:9a:01:12:14:2c:65:2f:5d:7d:96:6a:
                    52:e2:e0:4d:df:12:68:21:d5:4c:bc:70:ca:89:1e:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:C9:DB:BC:94:C3:08:85:B2:04:1D:14:6C:68:F7:86:56:9F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd71157-37de-367e-9361-7794e2b647e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b310::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:af:fc:99:b3:d9:9b:83:b6:32:c9:61:db:0e:9f:a0:db:bc:
         55:af:dd:b7:26:11:a4:28:2f:e7:d5:51:3a:5a:bc:34:ff:b9:
         9c:b3:30:05:82:58:f1:ed:fe:3f:5c:61:37:78:d0:dc:67:3e:
         a4:57:8d:4e:65:7a:1d:03:33:4c:6f:e3:8e:fa:30:04:b0:e5:
         0e:ef:70:d1:8c:4c:b1:9f:33:aa:d1:89:bd:da:bf:1b:53:3c:
         a1:0e:88:28:06:ad:bc:9f:1d:16:da:bf:60:99:99:ad:4a:f0:
         8e:4a:08:ec:3c:47:67:df:17:96:3e:e3:b6:48:14:9d:22:77:
         1b:65:c9:6a:fd:21:5f:97:4f:30:16:6d:45:37:7d:71:d0:d7:
         82:cd:70:6e:62:a0:45:f8:4b:ff:ce:b5:c3:4f:dc:85:2d:dd:
         35:99:b0:b3:4a:a7:16:75:28:af:93:7c:eb:3e:13:b2:dc:c7:
         fe:b5:2e:6e:08:a0:b9:df:ef:11:bc:87:4d:9f:91:90:3d:9d:
         d5:78:7c:6e:24:8d:6a:3a:88:9a:93:7c:55:8a:a2:ba:80:82:
         43:33:09:44:be:50:5b:70:dc:c6:4c:18:44:e2:f5:1e:af:7f:
         ab:01:42:c6:3b:fe:57:df:3b:52:8c:57:51:f0:38:b4:28:0e:
         08:45:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:34:56 2025 by rpki-client