Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc75302-ce8c-3471-b30a-e1879673123a.roa
File:                     bbc75302-ce8c-3471-b30a-e1879673123a.roa (raw, json)
Hash identifier:          AxB4Tt+BLed+7MNbmjqenXTrdBbP2dhFbrQSZfFERNw=
Subject key identifier:   99:2D:4D:75:B6:86:60:2C:A9:A6:79:EA:C6:B3:38:DE:8B:39:9E:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A39747FCD22C431FA2B432CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc75302-ce8c-3471-b30a-e1879673123a.roa
Signing time:             Tue 17 Jun 2025 19:36:34 +0000
ROA not before:           Tue 17 Jun 2025 19:36:34 +0000
ROA not after:            Mon 15 Sep 2025 19:36:34 +0000
asID:                     6167
IP address blocks:        2600:1009:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:74:7f:cd:22:c4:31:fa:2b:43:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 17 19:36:34 2025 GMT
            Not After : Sep 15 19:36:34 2025 GMT
        Subject: CN=52990558-d631-4812-825d-cc852e990346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:65:d7:72:d9:54:e9:13:b5:47:2a:0a:cd:
                    89:78:65:68:be:9c:20:bc:eb:08:f6:17:f4:59:b4:
                    b6:71:14:0f:41:ee:db:4f:2e:48:ec:da:6f:d9:fe:
                    88:ad:2a:7a:26:9f:f7:f1:9e:44:4c:06:8d:22:e3:
                    f3:55:1f:5e:54:78:64:fb:dd:2b:86:ed:8c:c2:ec:
                    fd:a6:22:61:0a:ae:2a:32:12:f2:4f:ff:41:03:44:
                    74:a5:da:5b:2d:ca:14:6e:08:e9:ae:23:b6:cb:8f:
                    1a:57:05:3c:d8:9a:3a:8b:ea:2f:3a:5e:6b:1d:7e:
                    bb:bc:b3:2d:0d:ae:47:18:a7:b7:c5:2b:25:17:3f:
                    e0:4b:a4:5e:1d:f6:27:ba:81:ca:7a:1e:59:9e:95:
                    4c:a8:7e:cd:55:8c:01:cc:e1:22:28:31:c5:91:3c:
                    ca:f2:43:bd:bb:a7:02:fe:f7:3d:e4:b2:30:a7:6e:
                    db:65:81:fa:8d:f0:2a:27:43:a2:b8:b3:7e:a8:e5:
                    3c:87:a4:a6:c3:93:ec:52:9e:b8:06:bf:ed:22:32:
                    dc:dc:bd:e4:2d:4b:34:fa:14:36:88:45:21:e8:3d:
                    3c:f4:2c:3b:64:83:8c:26:3c:4d:79:31:0e:77:48:
                    bb:06:2d:c5:7e:da:e3:fd:9f:44:ba:80:ff:3d:bc:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:4D:75:B6:86:60:2C:A9:A6:79:EA:C6:B3:38:DE:8B:39:9E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc75302-ce8c-3471-b30a-e1879673123a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:b1:51:e3:79:3c:d0:6c:89:74:c0:b4:89:a7:47:4d:cc:
         34:4c:d5:bd:4c:48:49:d8:55:bb:b1:4e:e9:c7:17:1a:a8:a9:
         d0:65:50:80:92:c3:5c:f1:d2:a8:ba:85:44:39:e3:33:69:69:
         0d:91:62:98:6d:d9:48:3f:e9:5a:97:dd:da:77:74:49:3b:b8:
         a4:60:a5:0b:a3:e3:93:5a:83:63:d1:05:69:ff:37:81:8c:89:
         08:82:cc:be:73:8a:4b:f8:36:b7:c0:aa:54:e5:27:64:7f:4e:
         cb:12:48:06:56:b3:56:70:29:b9:aa:88:39:65:14:10:51:c7:
         57:ad:7e:5a:e7:03:a7:2f:bd:b1:c8:ae:b2:29:31:7a:dc:51:
         aa:d2:41:43:80:bb:fd:fe:7a:eb:d6:53:9f:0f:ee:bb:ed:bf:
         2f:87:2a:c1:c7:50:58:f4:7f:10:76:dd:92:cb:df:e5:4d:85:
         cf:8a:fe:12:16:21:ec:f8:7d:56:3c:f0:a3:c3:b8:f8:d7:8a:
         2d:88:63:d2:89:a6:d1:38:63:d5:80:b7:24:db:3d:a8:69:1c:
         74:82:93:b5:58:1d:3c:82:aa:3b:ff:57:a7:8f:53:58:e1:71:
         67:aa:1c:db:8f:17:ee:1a:6d:01:2a:3d:a4:21:17:84:b1:53:
         58:76:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 02:30:21 2025 by rpki-client