Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/717c8885-c707-3f49-aa64-4c7370cc0ff3.roa
File:                     717c8885-c707-3f49-aa64-4c7370cc0ff3.roa (raw, json)
Hash identifier:          0VEy7HXHT1JATQbiTElHtNkpfrmS2/ItSN2Z5BIkGi4=
Subject key identifier:   97:AE:FE:00:5C:B1:5C:6D:B8:9A:56:F3:CF:0A:3C:5A:64:78:66:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849FEE7FDA8EAB6A6669A86EE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/717c8885-c707-3f49-aa64-4c7370cc0ff3.roa
Signing time:             Tue 27 May 2025 20:16:35 +0000
ROA not before:           Tue 27 May 2025 20:16:35 +0000
ROA not after:            Mon 25 Aug 2025 20:16:35 +0000
asID:                     6167
IP address blocks:        2600:1016:b080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:e7:fd:a8:ea:b6:a6:66:9a:86:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 27 20:16:35 2025 GMT
            Not After : Aug 25 20:16:35 2025 GMT
        Subject: CN=1d36ab60-8507-4c76-b01b-6940f1f7421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:ae:90:7f:4e:ce:37:2f:f2:1e:c1:ab:8c:
                    d1:f6:e3:a9:1e:7e:35:d3:00:97:1d:e8:69:d2:63:
                    62:42:46:45:59:2a:37:35:20:02:c0:1f:f0:fb:fa:
                    8d:7c:fa:28:8e:7f:ed:9b:0a:86:c5:23:76:3f:ec:
                    4f:18:6e:6c:7a:e8:f1:51:d6:a3:ba:84:f9:22:16:
                    16:de:81:0e:fd:23:9b:af:b5:70:7d:cc:17:76:92:
                    3d:12:a4:c2:18:f4:ff:06:da:51:05:96:23:f4:33:
                    c3:cc:61:32:91:6b:9b:b0:b3:f2:08:b2:b5:59:64:
                    02:5b:a9:21:d7:59:8c:f3:dd:00:86:1e:4f:d6:24:
                    b0:6a:1f:ef:47:41:5d:ee:56:be:06:3a:74:95:4d:
                    77:f6:5c:aa:ef:2e:7c:d3:c0:e1:a9:cc:bb:e2:30:
                    47:66:db:5f:99:f7:21:79:75:20:19:d2:a1:6b:9b:
                    fb:cf:9b:24:a7:b1:c7:2c:ee:0f:ea:19:00:d2:aa:
                    5b:d6:48:b6:ba:71:c2:22:78:a3:61:59:61:94:78:
                    1d:5e:40:ac:8c:f5:d4:04:21:bf:06:48:a7:44:6f:
                    b4:b9:b2:7c:c8:25:41:36:3f:09:d2:fd:f3:ea:85:
                    d0:b1:fc:34:b3:a5:47:65:03:1d:7b:ca:fe:1d:00:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:FE:00:5C:B1:5C:6D:B8:9A:56:F3:CF:0A:3C:5A:64:78:66:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/717c8885-c707-3f49-aa64-4c7370cc0ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:20:78:86:48:81:99:46:5c:dd:d9:9a:3f:ad:d8:5c:b3:44:
         b5:90:3e:60:a6:d2:96:19:0b:bd:99:78:66:4e:3f:6b:92:b0:
         8e:76:0e:4e:98:1f:5c:1a:d4:f1:08:f7:d5:2d:f1:84:15:5e:
         2d:49:85:3a:63:c5:88:e6:10:5b:6b:55:b1:2e:20:be:47:02:
         91:83:91:62:1d:d9:c8:fe:3e:51:ed:9c:d6:74:77:75:04:d6:
         d3:51:69:0e:cc:a9:a4:c4:a0:93:ed:3b:3c:f8:a4:79:a3:88:
         c1:e2:a2:a1:b1:0a:8a:fa:63:89:67:d7:f1:85:09:39:2c:c2:
         97:59:41:61:2e:7d:3c:b2:ab:4f:9b:44:46:10:8e:76:51:0c:
         7a:b7:c9:1c:af:1b:aa:7f:8f:bd:20:e3:ab:bc:0c:34:91:57:
         9f:85:3b:26:c5:ef:d1:34:62:c8:49:c6:17:b3:b1:68:3e:b4:
         7b:8f:79:96:cc:5e:e5:f5:0e:d2:ef:46:69:5c:90:20:b7:8e:
         89:ea:be:d4:64:de:76:1e:81:d6:d9:6d:7e:5e:f2:d6:9a:55:
         dc:2d:90:11:a9:46:85:8f:52:57:2d:ba:a5:eb:1f:ac:fd:16:
         ac:5c:5e:ce:07:84:09:05:c5:cc:e8:94:30:f8:b9:8f:04:bc:
         fd:7e:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:01:49 2025 by rpki-client