Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa
File:                     4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa (raw, json)
Hash identifier:          YQKawFnbPHDkoibtbvRKYpFb9MfjApzubzkCBHOA0EQ=
Subject key identifier:   E9:47:E6:AE:AB:51:5D:3E:CF:72:4C:DC:18:D7:14:49:3B:9E:A9:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AB47D0113DC46F17AC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:bf02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ab:47:d0:11:3d:c4:6f:17:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=886fcdd7-f867-4dc9-9d76-460229c3ba47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:55:f4:57:a2:05:26:ef:ca:83:d0:09:9a:
                    cb:a4:c2:49:1b:45:53:1f:ba:72:87:4f:66:d8:58:
                    40:6f:12:a3:6e:7d:42:ef:98:b5:8e:2b:91:6b:df:
                    72:1f:b1:4b:bc:e6:3c:8e:5c:46:27:84:e9:8c:c7:
                    7c:68:47:32:a7:77:77:75:69:f9:2e:cf:53:a9:db:
                    51:ef:e6:20:72:5b:36:95:5d:6b:2f:fa:ce:23:23:
                    ec:8e:92:30:09:ef:c9:50:d7:6a:4f:ed:26:e2:a5:
                    8f:bd:ee:50:0c:6d:2a:8c:ee:23:5e:53:3e:e5:6b:
                    d9:29:a1:a0:28:9d:b2:47:19:fa:7b:fb:70:b9:b2:
                    3d:d3:68:bf:69:a4:b6:52:b7:8a:e1:71:16:2a:2a:
                    3e:1e:f2:3d:2d:cd:96:15:79:14:58:4b:85:10:7c:
                    7d:f2:41:98:0c:bd:56:b1:04:7f:20:ac:e3:1c:d2:
                    20:15:ca:d5:6c:43:65:33:83:4f:bc:4b:a1:98:b9:
                    0b:2a:78:b5:20:15:81:66:6f:ce:b6:b7:cd:d0:8d:
                    88:6b:ba:75:4f:e1:7f:6f:fa:41:5f:b5:e2:b7:f5:
                    0b:ea:15:c0:75:0b:27:e2:59:fa:01:27:c3:2c:1e:
                    ec:17:9b:33:1d:02:b8:62:a2:22:66:0d:e3:76:0d:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:E6:AE:AB:51:5D:3E:CF:72:4C:DC:18:D7:14:49:3B:9E:A9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:60:eb:2f:88:66:61:48:50:9e:ab:d6:a3:e7:a4:ef:3e:ae:
         ff:ad:38:c0:20:7a:47:ab:4e:c8:33:0e:39:69:19:46:31:5b:
         6b:87:82:fb:5f:83:0f:e8:5d:ba:63:9c:9a:30:7c:67:7b:d8:
         60:22:9a:2e:9d:b1:98:45:f4:fd:43:a7:df:2e:4f:cc:08:05:
         b4:15:59:f9:24:de:99:81:c4:36:f7:ee:19:c9:7d:f1:e5:5f:
         a7:4a:a9:bb:44:06:d4:cf:c0:88:b2:b2:4b:1f:6f:f0:a9:23:
         b6:ed:ee:77:3a:67:88:e4:82:dd:a5:f2:43:aa:74:42:86:f5:
         1b:50:66:53:fd:79:e0:8d:c8:76:07:d6:d7:c2:4c:7b:3d:8e:
         0e:c2:e8:e8:af:7e:49:08:1c:88:b6:38:dd:6c:51:05:4d:86:
         99:3d:3d:f2:12:c9:45:14:30:04:f3:06:c2:6e:13:2e:22:af:
         c3:fb:0d:fd:c8:32:2f:1f:76:78:cc:23:63:7e:44:fd:65:48:
         00:9d:ae:bd:2a:d5:a1:7a:14:27:e1:d1:cf:13:ab:b7:4d:7a:
         dc:2e:6d:fa:f7:54:77:27:e6:4d:80:01:0e:94:97:45:12:39:
         3d:46:3a:49:f5:bf:e0:67:32:06:b9:89:05:b5:9c:08:e6:60:
         26:88:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:48:29 2025 by rpki-client