Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a570e3dd-4b14-35c8-9ebf-9a136f097056.roa
File:                     a570e3dd-4b14-35c8-9ebf-9a136f097056.roa (raw, json)
Hash identifier:          NAZK0DigwmQu6qfWbFvtMDYBjo1ElG1ng+jgpkdRmqk=
Subject key identifier:   13:A8:ED:2F:03:8D:7D:1E:7C:D7:DC:FF:7C:E9:29:75:DA:5E:B5:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A612B123673736F2CEC3DA500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a570e3dd-4b14-35c8-9ebf-9a136f097056.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1012:a026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:12:36:73:73:6f:2c:ec:3d:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=b6bbce1c-43bf-43c3-b029-34ceaddabec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:84:71:48:6b:30:b4:ab:24:71:52:4d:dd:
                    f9:5b:ed:de:61:f8:90:07:ba:d9:09:54:25:1e:58:
                    3d:3b:ca:76:24:ed:ab:f9:9c:7d:56:06:83:cf:be:
                    21:de:da:6b:a5:a9:75:a1:12:db:c5:91:3c:4b:07:
                    18:8d:b8:37:7b:21:21:54:03:bb:be:47:3b:ad:a8:
                    23:bd:44:1a:4b:42:90:06:59:08:5d:aa:e9:75:bc:
                    3b:3a:86:ac:af:08:24:e4:10:1e:86:d6:fd:6b:d1:
                    da:cd:f1:30:ae:b5:b5:4d:9e:69:97:65:42:81:f4:
                    71:b5:d1:23:0f:42:25:22:2b:c8:85:41:bb:b8:14:
                    5a:05:4a:29:c7:ac:2e:de:50:15:c6:5c:fc:73:9a:
                    b7:25:d5:db:b8:2f:f5:ad:e2:4b:46:ed:f7:c4:49:
                    66:e0:58:28:78:76:7c:ec:72:e6:24:a8:9d:05:d4:
                    1f:be:a1:00:5f:c6:a4:b4:3d:5a:7d:14:5f:b7:42:
                    fe:db:6b:9c:f9:19:e2:54:b8:9f:8e:01:d2:06:5e:
                    69:64:70:ea:94:b7:53:df:43:67:51:01:31:61:2d:
                    5b:41:23:a6:c2:91:7d:83:03:39:6a:03:d4:79:7b:
                    e6:2f:16:34:14:03:92:51:05:f0:66:44:ed:20:92:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:ED:2F:03:8D:7D:1E:7C:D7:DC:FF:7C:E9:29:75:DA:5E:B5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a570e3dd-4b14-35c8-9ebf-9a136f097056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:bc:a9:ae:03:cd:bd:60:05:43:6c:8b:ea:e5:6b:67:86:
         27:be:a7:b1:47:50:31:0a:1a:f7:49:99:cf:08:6f:fc:bc:3c:
         8f:98:45:0c:ea:14:e1:5c:59:2c:bb:d3:75:7f:30:ca:fd:b2:
         12:a4:10:cb:5f:80:21:d8:7b:c7:ab:fd:1e:30:6f:bc:01:8b:
         78:fa:96:82:73:f1:a2:f2:aa:9a:fb:92:c4:41:26:e3:81:7e:
         f4:d9:66:90:a6:1b:76:f7:2a:b9:6b:18:ad:d6:e2:a0:b7:65:
         38:94:f7:b8:3a:92:cf:65:b9:b2:b5:da:45:77:f5:41:9b:63:
         06:61:f1:be:c5:5c:4c:1b:df:46:e8:02:c7:b0:79:ac:c5:6e:
         fd:4c:ea:cd:7b:71:96:3c:c1:90:3f:d9:b6:a9:ea:5e:f3:5e:
         26:95:cd:93:85:4a:23:da:99:99:7f:1e:21:92:58:e6:21:15:
         5a:24:66:92:f5:17:f6:b2:f7:3e:02:17:6f:91:3e:f7:30:f2:
         f3:6c:73:30:7b:53:61:c6:df:65:e7:08:57:15:be:03:e3:7c:
         74:f4:8f:df:b5:0f:5e:4d:4c:f9:7a:71:80:91:75:46:91:f4:
         03:39:0f:26:d0:20:3e:76:88:4d:32:47:92:46:38:28:d6:20:
         48:87:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:12:27 2025 by rpki-client