Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e136d79-b818-3b95-a4ca-5900b38fd6c9.roa
File:                     1e136d79-b818-3b95-a4ca-5900b38fd6c9.roa (raw, json)
Hash identifier:          MLAciWVWJsPO46z4fwP4tEMd/KWTR/t9VqGSg6sTs9s=
Subject key identifier:   BE:A7:6C:68:CA:A2:56:3B:51:FA:02:D2:81:12:E4:D3:15:2D:92:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AECA09DC12A88E0AB760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e136d79-b818-3b95-a4ca-5900b38fd6c9.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b1e0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ae:ca:09:dc:12:a8:8e:0a:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=3a29947a-1ed8-4e91-98ad-2cdb74e50426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:3a:e7:6d:ab:54:94:50:1f:f6:5b:14:f5:
                    8b:10:ea:30:b9:be:33:c9:09:fa:32:6f:f5:ce:c9:
                    71:15:de:cb:dc:83:86:75:5f:07:0a:07:d0:02:15:
                    98:8f:a3:d2:65:e2:a9:66:f5:bd:6b:fb:ac:f0:bb:
                    31:5a:73:24:47:f2:f4:f5:63:19:88:5f:30:83:0b:
                    fc:d9:d5:9f:d2:dd:51:fa:0b:09:6b:18:52:99:0e:
                    06:91:cf:92:a1:fa:ba:1c:19:9b:03:5b:e9:93:62:
                    05:96:d8:05:7d:60:c9:c4:36:7f:75:20:28:4c:7b:
                    ca:28:6a:8b:b6:f5:cb:b1:87:b9:11:73:cc:8a:a5:
                    a1:f1:a2:53:fb:e9:d0:94:49:19:3f:6f:2a:ba:7b:
                    60:7f:51:99:fd:b3:54:10:58:c4:4f:10:f1:fe:05:
                    6e:4f:45:4f:32:63:0f:1d:10:e6:b4:82:b2:da:0e:
                    2d:0b:35:64:59:02:c4:45:d1:8e:26:aa:d4:42:e6:
                    ef:5a:cf:a0:86:be:f5:34:1c:c0:e7:48:b9:fb:19:
                    a7:c2:af:c8:14:9a:cb:78:e1:39:e4:1a:4b:b9:2a:
                    e2:aa:fd:27:f3:6a:2a:a9:cc:48:fa:e1:3b:e4:64:
                    e5:15:4d:71:87:71:b9:f0:83:a9:20:33:ac:66:9e:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:6C:68:CA:A2:56:3B:51:FA:02:D2:81:12:E4:D3:15:2D:92:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e136d79-b818-3b95-a4ca-5900b38fd6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1e0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:ad:35:25:df:33:4d:ce:30:02:e2:40:62:7f:3d:90:88:
         ea:2e:8c:5c:76:47:49:3c:45:28:88:0e:96:0c:0c:27:fa:21:
         ba:bd:9d:fb:ea:5c:45:5a:c1:6b:94:07:7f:e0:60:42:0b:2c:
         0c:2f:00:f5:10:af:db:31:aa:d5:b0:78:7f:65:44:ed:c6:d8:
         c5:4b:73:3c:b9:34:27:00:5f:51:c1:89:a3:c3:fa:a7:25:f7:
         24:58:eb:87:ec:2a:3e:36:85:3e:95:28:8c:1a:13:1e:c1:60:
         93:7f:c3:b8:db:84:79:93:e2:5f:c5:32:8d:6c:b2:1c:3a:a0:
         91:c4:1f:d8:80:ff:0b:b3:94:16:a8:a9:a2:c7:6e:eb:ba:35:
         1f:20:8c:6f:6b:29:f9:94:5d:1a:9b:44:7a:b5:b9:f2:07:fd:
         28:67:0e:9c:1d:7d:9a:e6:26:ac:c2:8e:b4:c3:56:ce:96:58:
         8b:f3:67:ff:b6:1e:0d:04:be:91:fc:62:43:82:6b:40:4e:57:
         2e:30:cc:06:2f:75:0e:ee:af:3e:e9:eb:9b:03:32:b6:2d:1e:
         25:d8:be:46:7d:5d:23:2e:25:80:6b:e3:d3:69:52:cf:5b:06:
         1e:7a:b4:10:9f:27:31:02:bb:c4:e1:12:f8:61:2f:b4:78:7a:
         8f:01:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:43:11 2025 by rpki-client