Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39a45a58-4ac0-3138-9a5d-ff85b4bf574a.roa
File:                     39a45a58-4ac0-3138-9a5d-ff85b4bf574a.roa (raw, json)
Hash identifier:          TopsgxiKp6ZZuN09VL0r3ev6o2vbl5hZ1mXWEEN6Cz8=
Subject key identifier:   DC:07:D6:A3:CD:69:17:B1:C6:34:30:E4:E0:0C:D6:B1:21:A8:C9:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A612B2103B19B04BA00D7DC50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39a45a58-4ac0-3138-9a5d-ff85b4bf574a.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1006:a023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:21:03:b1:9b:04:ba:00:d7:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=e35c2b82-3d7c-4d5d-a381-fda52aa5d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:90:db:83:bc:a3:b3:c3:70:e2:03:4f:6a:
                    82:17:f4:64:88:c9:c6:a2:3a:e1:00:62:76:ea:7d:
                    01:01:49:23:11:04:32:0b:83:15:ff:a3:d5:98:c9:
                    d4:fd:fb:2e:5e:2a:5c:f8:4c:19:4c:d3:3d:b4:9f:
                    83:00:c1:5a:68:23:fc:ac:3f:f7:7b:d7:f8:6f:0d:
                    74:38:43:9a:90:5f:00:8b:6f:0c:42:34:71:09:50:
                    84:be:bd:ae:8f:9a:8f:b2:3a:6f:18:23:23:61:30:
                    18:4b:5b:24:85:b0:f1:44:d6:eb:08:28:b0:b8:33:
                    09:56:8b:69:a7:74:03:e1:09:de:7c:2a:2f:67:94:
                    f9:d9:c3:6e:95:23:42:63:43:12:2d:b5:b2:4b:bf:
                    db:97:23:cf:12:12:35:28:3f:d3:b7:66:cb:b1:05:
                    a0:8c:7c:ea:6d:fa:fe:a3:37:e2:3b:85:25:4d:bf:
                    9a:6f:b3:51:25:ac:45:9c:16:89:2e:d6:7c:23:8a:
                    aa:cd:70:a1:fb:32:72:5e:3f:1b:4d:d7:50:b6:f4:
                    5f:18:7b:24:72:76:89:87:5b:b0:90:3f:78:3a:d2:
                    32:aa:04:a1:43:98:d8:15:3d:9e:92:a5:b4:34:d5:
                    d6:76:0f:3c:03:1c:47:75:53:bc:7b:f4:24:c3:09:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:D6:A3:CD:69:17:B1:C6:34:30:E4:E0:0C:D6:B1:21:A8:C9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39a45a58-4ac0-3138-9a5d-ff85b4bf574a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:20:cf:55:a3:39:13:2f:3e:34:fa:69:b9:68:4b:ff:36:ad:
         6f:95:7d:b9:5c:0d:64:34:fc:4e:85:06:db:6c:ea:6b:11:76:
         9a:0f:c8:31:1d:71:78:8c:29:2e:cd:c0:aa:e4:af:93:f9:19:
         4b:ad:fc:18:cc:b4:a6:cc:42:6d:de:1e:bd:1b:c3:3d:b1:07:
         58:9b:8c:67:41:55:29:0f:ec:7d:26:36:56:9f:34:0c:db:a9:
         07:97:80:63:02:44:b2:e3:6d:48:41:0f:7f:7a:bd:c2:ac:a4:
         e5:9e:a4:97:d5:5a:f1:b6:9c:c9:fa:60:68:e4:07:5c:30:63:
         3b:24:9b:76:90:6a:75:82:b9:47:8a:71:d6:4d:3a:d6:15:07:
         83:46:f3:95:aa:4f:33:f6:af:be:74:fb:df:9b:18:2a:23:f1:
         b6:18:32:7e:df:8d:02:78:63:21:fd:49:5d:7c:07:b2:58:b3:
         f0:18:af:d3:c8:b9:67:74:33:51:b1:c9:c9:26:c2:86:9f:1a:
         93:0a:ee:9b:86:4e:a6:86:20:14:18:d6:ce:9c:08:42:48:97:
         22:11:15:ea:ea:2e:27:95:ec:7a:17:f5:48:4b:59:03:89:07:
         dd:31:89:26:11:80:c6:61:5e:c4:a0:53:32:48:af:77:3c:0f:
         6e:0e:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:38:29 2025 by rpki-client