Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
File:                     bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa (raw, json)
Hash identifier:          xlH9l0NIXqkEmKg3lizfSO92Bm1FJaDnZoc44luFm1k=
Subject key identifier:   14:E5:DC:81:81:07:58:B7:45:7C:68:5E:1D:3F:4E:FD:7D:D2:29:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B05BC1F30877D7A4B600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:bf18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b0:5b:c1:f3:08:77:d7:a4:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=409afaa4-ed16-484b-8c73-b48d5d11de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:28:6f:2b:bb:f8:13:bd:f0:a8:3e:db:d2:
                    b0:7d:88:2c:4e:29:3e:f8:bf:08:75:54:ad:e1:c9:
                    f4:cc:a5:73:03:37:80:ac:89:fe:57:1f:0c:da:1b:
                    ed:6e:f7:53:c2:ef:9d:e8:04:ab:58:66:8e:c0:1b:
                    12:f6:42:90:15:9a:ce:3f:c0:52:f3:ce:15:a9:f6:
                    7b:63:cd:35:47:5c:b0:15:53:e2:ac:1d:89:bd:34:
                    6a:63:ca:15:c5:58:65:f8:61:fa:b5:55:9f:97:ee:
                    9a:02:90:9a:14:21:14:71:1a:dd:95:bf:ad:76:09:
                    86:ba:8f:f5:87:89:db:bb:46:09:ff:fd:ba:ec:de:
                    3b:dd:58:11:63:f5:7d:96:65:f3:d8:c5:7c:1e:f2:
                    69:77:4c:e6:ce:4b:cb:48:9b:92:3f:ec:b5:f2:80:
                    3b:68:db:7b:1b:65:eb:6f:d2:a1:a9:45:00:88:2b:
                    eb:89:98:d9:f4:7f:20:c2:d9:7d:bf:74:e4:32:ec:
                    73:bd:8a:a4:af:39:73:e2:d1:78:d4:08:3d:b4:05:
                    a7:a0:17:c3:1b:9e:0f:79:cf:a2:3f:da:91:11:28:
                    f8:d9:86:07:19:ce:fe:7c:5a:b2:67:a4:31:36:c4:
                    ab:a0:6b:1f:da:09:0f:3c:41:70:28:d1:7f:fd:a6:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:DC:81:81:07:58:B7:45:7C:68:5E:1D:3F:4E:FD:7D:D2:29:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:bd:d1:f7:60:de:d3:10:a4:82:54:64:1e:a4:ea:a6:40:
         16:51:fc:e6:27:85:eb:f6:43:03:86:28:2d:b4:4a:da:ef:f5:
         ab:92:de:34:ee:63:ae:5c:c4:9c:2a:73:36:1e:7f:5b:3d:e2:
         ea:78:59:45:ea:e7:ea:01:9a:25:58:e0:50:9c:c4:8c:c7:18:
         25:d8:1a:77:65:b4:e9:71:7a:16:cc:28:05:0c:9a:ef:a9:71:
         61:74:b0:c6:7f:80:21:c9:66:2d:20:6f:58:cb:4b:19:85:b5:
         c4:50:a2:4a:da:df:9e:19:67:96:cd:40:73:43:60:e5:31:58:
         68:12:59:f7:79:cc:b7:38:be:6c:69:30:5d:65:d1:59:bb:f1:
         e7:65:e6:81:c9:a6:47:0a:d6:53:5d:8e:94:8b:6b:27:69:18:
         36:ca:0f:ba:29:bf:a3:63:08:0c:0a:e8:67:8a:e7:f7:10:ba:
         71:59:83:49:b4:28:cb:c4:2c:8b:c5:fa:0a:ab:7e:2a:a4:cd:
         70:52:cb:de:d7:0e:af:ec:57:c4:1f:a3:2f:8f:12:ff:f2:2c:
         1b:cd:33:83:4d:bd:1c:69:58:09:35:d4:03:25:72:b0:51:a9:
         39:25:40:47:fa:8d:f7:78:71:a1:d6:c8:61:1e:9a:36:e6:12:
         26:33:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:07:04 2025 by rpki-client