Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
File:                     dee5b4c9-16a9-3873-8941-c417a9236e9f.roa (raw, json)
Hash identifier:          d3gMCbng5bnu5VYe7JF5KZqLj6vbWaL7T4FUjjG3yMM=
Subject key identifier:   CB:8D:04:52:FB:C9:A9:58:D2:EE:27:C3:A6:2C:F2:E1:D7:E7:8A:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C76F0A9ABEE3993F6380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:b170::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c7:6f:0a:9a:be:e3:99:3f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=388491b2-ff9a-44b6-898d-d2c81843e0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:28:a2:83:00:95:26:fc:5e:db:b5:53:8d:
                    91:6d:16:10:cf:cf:09:2a:71:4b:09:e2:3f:ca:b3:
                    32:06:d4:00:5c:4d:94:15:0f:0c:94:f1:06:11:01:
                    22:b2:ab:4f:72:32:10:76:11:17:37:26:57:b0:e4:
                    79:94:15:55:cc:3d:ea:58:08:cc:1b:11:19:55:fe:
                    8b:51:d4:4b:21:8d:79:dd:ad:ee:a8:c8:de:d8:48:
                    fd:80:da:43:ea:9f:51:97:17:a2:19:95:26:4e:6c:
                    f5:e6:5f:97:ef:94:ec:e5:05:cc:28:ba:b5:fc:41:
                    3c:36:91:80:83:d5:11:8e:7c:69:0f:7f:73:c5:43:
                    d8:69:9e:95:5f:13:12:7a:53:ab:91:28:70:ce:90:
                    af:55:9b:cc:b6:f0:4c:08:06:51:4b:65:92:77:cf:
                    38:b8:7f:75:51:64:de:6b:be:f1:89:2d:c8:73:ea:
                    aa:51:cc:6b:23:c2:9f:22:82:a6:41:ff:01:36:85:
                    4d:b3:e3:97:83:ef:89:1b:cf:7e:c7:35:b5:b8:05:
                    e1:ad:30:28:d2:32:63:e6:8a:f4:7e:6b:da:b2:3a:
                    83:38:f6:00:19:68:12:ea:2b:ee:de:79:b2:50:ce:
                    a3:76:d9:b2:89:9c:c7:39:69:71:c0:a1:7d:1a:25:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:04:52:FB:C9:A9:58:D2:EE:27:C3:A6:2C:F2:E1:D7:E7:8A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b170::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:82:f1:d3:91:d3:78:d5:85:0a:7a:4e:d4:33:43:84:73:
         2f:64:d7:c0:8f:1a:52:22:18:d5:0f:db:d9:20:1f:39:79:f7:
         72:6b:f2:c3:74:aa:35:c3:b0:22:56:3a:4f:0f:45:07:63:34:
         80:e1:27:19:2d:ab:29:6b:fc:89:63:14:3c:bf:29:8c:a0:08:
         f9:f1:7a:3b:ef:3e:74:7d:dd:d3:83:73:15:80:3d:e4:19:9e:
         93:50:d7:6b:50:75:b2:da:62:65:1b:c0:35:7f:81:a9:eb:84:
         bd:a1:3a:ed:19:93:c2:23:58:a3:85:11:a6:f3:86:a7:4e:ce:
         8d:89:78:50:9f:b6:b8:2c:df:9d:ae:ed:88:94:88:6e:9d:fb:
         f4:cc:39:f6:38:28:47:7a:14:e1:bd:9d:0f:a0:ab:5b:a4:2b:
         f5:1a:3e:92:0d:13:9d:e2:17:d4:34:84:10:60:d5:2c:7c:10:
         50:9f:b3:9e:1e:f3:46:6d:f3:bd:31:82:89:11:b3:48:96:55:
         99:9e:10:6d:2e:60:7d:66:93:75:d6:c4:b6:51:d9:50:a6:b4:
         f1:a9:38:37:ae:c6:36:27:fe:5d:ff:f3:9f:73:2b:c0:e4:4c:
         8d:fa:c7:ce:7c:16:9b:79:d6:cd:f9:8a:d2:99:ae:51:53:de:
         38:3d:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:36:52 2025 by rpki-client