Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b992156-5626-3be4-a334-20389d3795b2.roa
File:                     0b992156-5626-3be4-a334-20389d3795b2.roa (raw, json)
Hash identifier:          6Hc08uKRaD0e6son9dL22M90fVd5czMnCEgmK71dG5I=
Subject key identifier:   34:34:9E:8C:21:A0:DB:27:6F:E1:2E:03:CC:34:88:79:1B:FF:72:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4A266E31A814CE15B620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b992156-5626-3be4-a334-20389d3795b2.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:a020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4a:26:6e:31:a8:14:ce:15:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f3178a63-4dec-457b-86df-a012febd1365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:a1:19:1b:78:5c:b9:82:02:d0:fb:33:f7:
                    7f:bd:d7:3e:ff:f8:de:cf:e4:fc:e9:fa:a5:74:a2:
                    10:10:79:e7:a7:21:fd:b3:3d:cc:8b:85:53:cf:35:
                    fd:66:4c:55:e3:f8:fc:88:6b:bd:fb:1f:f3:23:41:
                    5b:95:82:ca:0c:3e:07:76:d4:93:1d:1c:56:f8:98:
                    97:18:32:2a:f0:69:7d:56:f3:c9:df:40:b6:b0:ed:
                    d9:c4:a1:58:f0:43:49:a9:8c:53:19:eb:11:1f:5f:
                    97:d6:de:39:12:fe:c7:04:11:af:7b:54:14:3f:e6:
                    cd:d9:c5:cf:07:7e:e4:2f:61:69:94:04:20:2f:87:
                    e2:02:11:b5:8f:5d:dd:c7:a6:b9:c8:54:0d:bf:af:
                    d0:eb:dc:27:96:c2:77:c7:7e:51:84:f3:25:b3:92:
                    36:00:ff:3a:9f:01:e9:2a:20:30:13:73:91:84:3b:
                    92:1f:aa:6e:a9:bd:df:36:a3:87:e0:3e:8f:29:75:
                    62:87:6f:94:2f:a2:50:c5:49:85:48:3e:db:5c:97:
                    aa:94:b4:54:08:9f:37:f1:ee:1e:f0:24:81:e9:34:
                    82:2e:a8:58:85:3a:0c:d5:62:8e:3e:9c:59:16:61:
                    7f:26:79:b6:50:00:c9:c8:a9:04:9b:ee:cd:27:29:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:9E:8C:21:A0:DB:27:6F:E1:2E:03:CC:34:88:79:1B:FF:72:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b992156-5626-3be4-a334-20389d3795b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:e3:58:30:7b:40:2d:91:db:cd:f1:02:96:92:cf:7d:0b:
         05:ba:63:ed:0f:f4:d9:be:8e:20:e0:18:95:8e:79:de:ea:14:
         bc:84:d2:ea:72:ee:29:1b:3b:89:ec:fa:c2:89:f2:fb:e2:65:
         23:1e:af:a0:d5:4d:98:27:bb:6c:a3:af:e4:c9:cf:62:d7:e7:
         15:8a:2e:ee:b4:6f:4a:0c:55:95:ef:40:bb:15:f8:5c:6b:90:
         58:17:e0:e9:41:09:1f:26:cf:0e:47:9e:de:59:8e:b1:0c:54:
         92:1c:c7:fa:5d:8b:1b:26:10:86:4d:95:4e:14:14:f3:4e:20:
         65:2b:f3:f0:2f:62:40:f0:b4:5b:ff:c4:fb:d9:e5:3e:de:0e:
         f1:8e:03:b4:8f:be:f6:f6:a3:25:66:8f:e6:95:8d:5b:ce:72:
         99:30:a2:c4:e4:fb:97:a1:87:eb:cf:40:37:df:b0:30:57:33:
         67:ed:94:59:72:47:c5:fb:ed:43:78:5d:3b:54:3c:d8:0e:78:
         40:b5:51:0a:26:22:09:63:ac:60:92:a6:08:15:6f:a9:e0:0a:
         5e:07:bd:57:f2:cc:63:da:24:d0:69:34:5c:86:1a:e3:88:2c:
         ef:fa:0e:da:28:85:78:29:46:ba:cd:36:92:bf:71:d6:3d:7c:
         c5:7b:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:11:10 2025 by rpki-client