Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbcc9901-9d95-3e9a-ab35-57ce46f0cf33.roa
File:                     bbcc9901-9d95-3e9a-ab35-57ce46f0cf33.roa (raw, json)
Hash identifier:          y2cDDDmiUPqOKCc8rGxHYHgmJ0jU0qWtOBFu9C2iCFo=
Subject key identifier:   A8:79:79:ED:72:51:C2:7D:26:0C:13:79:56:5E:93:76:44:1D:EF:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C1E6851F8536C6D103C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbcc9901-9d95-3e9a-ab35-57ce46f0cf33.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100b:b1f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c1:e6:85:1f:85:36:c6:d1:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=0ca7138c-79da-44e8-ba55-84345a94a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:e7:cf:e5:34:af:0f:9f:ad:64:56:51:1c:
                    25:f6:d3:8f:cd:93:5d:86:fa:cc:5e:20:e5:b1:3f:
                    a1:56:cf:3e:a9:75:1c:1f:46:c0:e7:6a:9e:5b:8a:
                    99:5c:e2:14:b0:15:6b:bd:14:10:be:cb:da:ed:17:
                    fe:bc:9d:81:88:cd:c6:bb:81:88:67:12:a9:26:48:
                    cf:dd:53:c9:5a:0c:94:23:75:d1:4a:79:9d:74:92:
                    ac:04:5a:0e:aa:40:00:e0:38:06:51:62:ee:73:4f:
                    a0:36:cd:8a:1f:b5:78:f2:3d:61:20:9f:1f:93:33:
                    a5:df:83:08:5c:36:36:44:62:f9:b5:0c:21:a8:9c:
                    12:a1:03:23:04:fd:4f:56:29:71:9d:ad:35:94:65:
                    6d:e1:a6:b7:4b:09:8d:d6:10:31:2b:2b:1d:20:e8:
                    f8:f8:f5:95:30:0f:4e:dc:f0:54:ff:0c:f8:6c:3b:
                    4a:2e:86:45:6f:59:d1:46:4f:90:70:3a:78:12:4b:
                    1e:13:dc:0f:e0:f4:1a:76:be:70:93:67:97:9f:b3:
                    f8:aa:2f:ab:f8:46:d7:63:b0:78:69:a3:13:84:f4:
                    2b:8c:f0:6d:8d:79:2e:bb:d6:90:ab:9e:85:1b:e0:
                    43:d8:81:1b:ef:28:49:cb:1e:a4:63:a0:3c:ba:da:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:79:ED:72:51:C2:7D:26:0C:13:79:56:5E:93:76:44:1D:EF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbcc9901-9d95-3e9a-ab35-57ce46f0cf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b1f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:df:8d:3d:4c:d1:e4:fe:7d:cf:29:c2:1a:18:6a:85:4c:
         17:5c:05:db:b7:00:09:77:d1:0b:b4:d5:6b:ef:00:f8:ec:11:
         39:50:46:e4:f8:07:a2:8e:b8:49:ee:05:05:3e:2e:f4:d6:c7:
         fd:be:54:66:bb:47:2c:c8:47:28:77:48:c8:0a:7d:b1:97:29:
         94:17:34:f6:77:39:de:e4:ef:21:09:e1:87:30:04:86:4b:41:
         f7:e9:59:68:54:d1:da:28:8d:31:cf:58:10:50:e8:df:f5:b6:
         7f:07:37:ad:da:3a:5c:b2:cd:67:a6:7b:35:ad:17:d9:23:2e:
         21:f8:ba:96:7e:e9:ec:de:35:11:43:28:f8:f0:f2:e6:27:13:
         fb:71:71:c2:b4:c8:d8:18:68:b7:55:82:ec:9b:df:08:3e:31:
         f7:a9:d1:39:97:85:f6:ea:c0:ce:97:9b:2b:1c:2c:bf:05:bf:
         18:0b:fd:56:ee:c3:9d:04:50:58:a3:b7:26:f8:2d:36:8f:eb:
         56:c3:f2:4c:b0:d7:35:2e:52:04:32:98:3d:d0:a4:ff:d9:41:
         1c:92:f8:fd:cc:d2:35:38:df:fc:c2:ef:af:bf:35:30:f1:f0:
         8c:b2:48:4f:8b:cb:8c:53:46:34:c3:bc:ab:c8:4b:a9:57:65:
         48:ea:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:52:10 2025 by rpki-client