Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a73f2a-521f-37f8-830b-b244cb047454.roa
File:                     34a73f2a-521f-37f8-830b-b244cb047454.roa (raw, json)
Hash identifier:          75HAMlmjN4Z0yrFvFECbYOnpBJwd5P5/XUXzyWtii/A=
Subject key identifier:   49:85:52:9A:80:70:83:D9:CD:9A:A9:50:00:BD:84:2A:11:D3:D4:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A612B1168FFC8F17915DC9E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a73f2a-521f-37f8-830b-b244cb047454.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1007:a112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:11:68:ff:c8:f1:79:15:dc:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=e38e5f11-749a-427b-bada-1c4b6653ce0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:64:fe:5f:16:f2:b7:de:43:be:b7:4a:46:
                    0e:8f:6e:4d:b9:32:e5:27:ef:06:38:ae:16:5f:59:
                    50:16:e0:d5:a2:cb:17:2a:65:90:c1:e7:8a:e3:49:
                    ef:bb:53:26:32:01:c2:d4:f6:39:8b:ca:56:75:b5:
                    fc:af:7d:10:79:07:34:ba:c7:5b:69:4a:16:1e:ab:
                    0a:ba:21:65:e5:ed:31:b2:34:3a:9f:6c:15:81:22:
                    aa:15:de:3f:c1:33:5f:ea:e8:e3:13:a8:d2:9c:ce:
                    b5:b6:b1:51:06:79:93:a5:5e:ef:22:54:8f:8c:e7:
                    c7:5c:66:3e:48:47:10:e1:64:48:0d:8b:08:1f:e8:
                    27:a7:e7:d4:3a:f4:68:74:ed:7c:8a:e0:86:52:a5:
                    87:b8:dd:c2:95:00:eb:9c:ae:16:c8:6e:de:8e:9d:
                    42:50:29:fc:76:e0:46:f1:8d:7c:00:d7:b6:c0:1d:
                    c2:db:3c:d7:43:eb:02:c3:1b:41:29:58:3e:fc:03:
                    26:71:1f:af:3c:22:b1:7d:45:c2:6b:c1:61:d3:f5:
                    ca:5e:1d:73:91:e7:53:07:37:b0:4e:39:da:63:97:
                    ec:96:52:54:40:39:47:53:1b:a3:11:af:3e:67:61:
                    42:63:fd:a8:b2:c3:e6:e7:36:d6:8c:13:ee:ca:12:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:52:9A:80:70:83:D9:CD:9A:A9:50:00:BD:84:2A:11:D3:D4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a73f2a-521f-37f8-830b-b244cb047454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e6:8d:a4:1e:dc:a8:b5:a1:ad:65:b6:8a:aa:a3:cc:8c:79:
         af:25:ce:9d:b6:36:6a:78:73:d0:df:5a:f4:2f:8e:c3:92:6b:
         f6:73:37:0b:f2:71:45:f0:6f:c3:d4:f9:33:18:a0:4d:4a:19:
         ac:78:e3:72:0e:f7:24:12:60:43:0d:a5:8a:2d:a6:81:d7:90:
         0c:d8:50:7b:95:91:77:ca:78:34:e7:e3:4f:22:b2:2f:59:ec:
         17:27:3d:5e:c5:67:49:ae:79:bf:e5:a3:a8:eb:4b:fc:40:24:
         63:69:09:a3:86:74:d4:65:94:54:29:e4:e3:b0:b4:07:de:4a:
         7e:50:79:46:fd:94:a2:e0:cb:da:9d:c2:04:a9:73:91:75:8e:
         e1:51:c6:93:a8:01:32:e3:56:e1:1a:9b:db:e9:56:6b:c5:3d:
         e5:9d:ee:5e:e2:27:f9:57:5f:21:63:73:bd:73:f0:86:d3:0e:
         25:96:42:6b:ab:03:66:59:eb:eb:7a:a6:25:64:3d:61:34:6e:
         6f:50:f3:0d:1a:fe:bf:fd:3e:58:6d:5b:b5:c6:58:cc:f9:2d:
         4f:c6:47:59:d9:17:e7:00:01:0b:88:19:0d:42:cb:e3:48:75:
         9c:4d:d1:c7:e4:91:83:2d:67:de:ac:c3:29:74:b4:f4:ed:56:
         17:87:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:48:26 2025 by rpki-client