Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
File:                     3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa (raw, json)
Hash identifier:          AaslGn1QO0bdRcOBegQcSTd9jwsM0qZzP6440O1ebvw=
Subject key identifier:   18:5A:E0:17:1F:D1:8D:DE:93:6E:1E:20:14:1F:48:EF:85:FE:BD:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BE15190C958843B67480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1009:b0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:be:15:19:0c:95:88:43:b6:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=fbfd17da-b940-4d5a-b103-46bf7ec40e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:db:a2:27:9a:b9:2b:07:d8:e2:d7:6a:01:
                    41:6c:88:0e:fb:a8:90:cb:bd:99:31:39:60:66:b4:
                    0f:eb:b5:6c:d0:4e:3e:ec:4e:98:b1:04:83:59:f2:
                    cc:e9:37:7f:51:57:86:6c:62:5f:e6:d4:ae:45:a1:
                    59:02:73:29:db:b1:3c:be:2f:90:79:55:cb:43:f8:
                    cc:65:96:8a:73:83:ac:f7:94:f9:4e:9e:52:8a:4a:
                    90:ed:f0:3c:77:4e:50:b7:b7:0e:c0:bd:47:4d:5d:
                    56:7a:e2:31:cd:1f:86:59:cd:d9:08:00:1c:54:82:
                    b6:d6:f2:e6:46:fc:9a:ad:71:c7:2e:97:a7:b3:b0:
                    5d:81:f4:04:55:90:46:f4:63:6d:fc:a4:25:fd:80:
                    95:6f:99:0f:d8:b9:f6:80:2a:78:38:6e:9c:93:cc:
                    6a:63:d7:f7:2a:d6:ed:2f:85:2c:89:61:8e:55:77:
                    d6:35:96:7e:28:6a:d9:6f:f2:9f:8f:31:5c:39:ec:
                    1d:9d:5b:18:42:f8:47:c1:a5:66:3c:eb:cf:ef:8c:
                    eb:d5:74:23:54:be:6f:83:22:64:fa:ca:a3:5e:01:
                    74:da:d8:a4:48:92:61:b0:a9:71:80:68:35:68:cd:
                    a8:35:47:01:31:9b:dd:52:29:75:cc:0b:ea:87:54:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:E0:17:1F:D1:8D:DE:93:6E:1E:20:14:1F:48:EF:85:FE:BD:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f443b15-2d1e-33b9-bf13-f9513ee52f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0c8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:08:95:f5:ee:bf:19:e8:e1:a6:77:28:10:9a:3e:45:c1:
         93:cb:83:3e:eb:0b:a6:a1:5d:7e:97:74:a5:e2:08:75:e0:4f:
         99:17:1d:57:f1:31:50:99:43:7d:12:7a:aa:e8:4e:a8:2d:f8:
         05:7f:ac:53:be:f1:73:ca:92:4e:6a:c1:3f:f0:d2:bf:9e:e2:
         0a:dd:9a:fb:5f:a0:3d:b5:40:a3:a4:f1:9f:f5:f2:50:34:ba:
         17:07:e8:d9:2a:d9:44:70:ae:bb:7d:b0:8b:1c:a2:d6:33:56:
         a5:0e:fd:5d:d2:bc:13:b0:af:db:38:ad:05:e3:fb:e4:00:f6:
         3a:57:d3:dc:53:42:4b:b1:df:93:e3:1d:53:a3:06:fa:9c:f7:
         da:a6:1e:8e:7b:5c:52:a7:3d:ea:42:4a:a2:2a:06:5b:ee:e7:
         9c:c6:13:03:64:66:b9:d6:f8:ef:a6:91:1e:14:bd:eb:44:89:
         7e:3d:b8:6c:3f:35:87:b5:35:01:17:b3:fa:6b:e4:78:d1:ea:
         3e:17:db:f7:59:09:57:77:7e:c8:9e:cc:5b:a4:33:75:12:18:
         91:47:b6:b7:40:0c:85:d2:16:82:db:4d:d8:01:85:a6:e3:46:
         df:82:05:5b:c1:91:d4:a3:b1:ae:78:0e:33:d6:9a:d9:f1:ff:
         5b:12:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:08:39 2025 by rpki-client