Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
File:                     6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa (raw, json)
Hash identifier:          MkaLww/e0Wq1t3Rc3gudjukbBftRyVuOz3TxE3CA/8g=
Subject key identifier:   9E:C9:8E:4C:3B:52:EF:AD:0F:98:CF:4E:37:C6:9C:B2:08:6E:8E:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290BECDF866000F4324D380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:1009:b1c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:be:cd:f8:66:00:0f:43:24:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=2e2f919e-ffdb-4055-b8e6-668c3f0dc2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:a9:80:0d:40:5d:b0:b4:67:3c:bb:c1:c4:
                    8b:b4:e6:bc:f3:72:2b:02:0a:db:b4:aa:fb:0f:24:
                    ca:67:d3:fb:b7:00:a0:5c:64:5e:f2:d0:05:3c:83:
                    ef:2e:81:33:ca:dc:59:92:44:f4:b8:bd:57:a5:3e:
                    0f:af:79:e7:6c:4d:76:c1:a2:56:7a:33:04:bb:19:
                    90:e2:32:06:02:88:7a:c0:57:8a:3a:3e:80:c8:e2:
                    17:ba:3e:04:2d:27:61:fa:2d:24:f8:a0:dc:3a:30:
                    de:f8:78:c0:32:52:b9:7c:34:13:30:46:90:54:d4:
                    a2:d2:dd:04:44:ec:62:4b:10:7a:b3:75:d0:27:ca:
                    72:3e:52:e9:77:c9:dd:ca:3b:5b:11:a2:e9:fb:b8:
                    3c:f7:d8:ac:ce:04:1c:74:af:2a:62:0d:47:75:d1:
                    1a:29:b8:cb:c8:d6:4a:2d:96:ff:bc:cf:57:ac:a1:
                    41:b3:5f:64:b1:27:dd:82:e7:b3:e1:42:bc:1a:c5:
                    3f:3c:f7:79:0b:f2:b4:44:c5:00:0e:1a:80:01:a5:
                    d0:c2:cc:a1:ba:08:5e:e7:ea:0f:1d:4c:ed:6a:43:
                    01:36:51:a9:c2:3b:10:61:45:3b:63:2c:85:ed:66:
                    96:cd:01:90:fb:98:06:e0:5e:7e:6c:88:b8:75:fe:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:8E:4C:3B:52:EF:AD:0F:98:CF:4E:37:C6:9C:B2:08:6E:8E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:2c:56:f3:24:a1:ed:64:4f:2e:82:8f:32:6e:f6:98:f5:
         ec:11:3e:0e:9e:eb:b3:85:48:8f:5c:82:16:b3:4c:ca:20:d9:
         74:e1:c6:57:1e:2a:54:5c:47:94:a1:82:1f:a7:63:0d:a7:ac:
         b9:c1:15:b5:5b:24:e7:1e:f7:41:a2:c5:2f:b4:be:b1:f9:06:
         38:fb:c1:56:c3:8a:76:cb:d0:3a:6d:ce:2e:2c:87:6c:af:c5:
         3e:03:a7:7d:03:fb:2f:8a:5d:32:0a:8b:35:40:57:ce:c2:01:
         f7:bc:55:bb:43:22:57:c8:33:e3:2d:82:72:ec:3f:a4:31:ab:
         d8:cc:d6:12:52:7b:df:90:d2:77:b9:97:10:a7:3f:c2:d7:a8:
         e9:18:90:a7:39:e7:2b:da:fc:43:68:e6:f5:aa:fd:55:2a:b3:
         47:43:ec:1c:c6:a9:d1:a6:fd:9d:04:ca:98:2f:80:e5:dd:f5:
         73:0b:e2:64:c1:a8:e3:16:a0:57:45:af:3a:ba:ae:6d:1a:51:
         8d:d5:56:03:fc:9e:d4:aa:0e:f9:74:7e:36:76:c5:40:02:27:
         95:48:67:17:a7:9a:d0:91:de:06:05:38:e1:0e:ba:9d:9e:26:
         c1:a3:41:25:1f:dd:29:73:78:8d:96:eb:70:b7:e1:b2:47:0e:
         d1:f9:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:20:21 2025 by rpki-client