Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0484b69e-3299-3a63-83c0-3208ba679f0f.roa
File:                     0484b69e-3299-3a63-83c0-3208ba679f0f.roa (raw, json)
Hash identifier:          sNyrzqxj9j/JQHJny9ntOn1eKCz17G+7zALlDBi/tZg=
Subject key identifier:   FF:12:78:CC:E7:98:59:F3:EB:DC:FC:05:1A:FF:1D:FF:7B:2E:22:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245DE106BD6D78270BDF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0484b69e-3299-3a63-83c0-3208ba679f0f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1006:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5d:e1:06:bd:6d:78:27:0b:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=4db5bcd0-ff27-4473-ab03-4ca0d7c3564c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:34:ea:51:cb:00:c1:0c:8f:c5:45:1b:72:
                    03:3d:7e:b5:ae:0f:15:a5:0a:19:e4:01:3a:0f:5c:
                    1f:f5:3c:0d:a4:3a:a8:a0:c2:f4:b9:cc:52:59:26:
                    b7:c3:9f:db:de:d3:55:d4:cb:26:d4:35:3f:86:1a:
                    cb:61:3c:d7:a1:cc:b1:0b:e2:be:c0:f5:f4:bb:ca:
                    af:1e:dd:71:c8:40:06:4d:c6:e9:f0:31:9b:b9:0d:
                    57:ac:b2:f2:bc:41:fb:95:62:61:fb:99:8b:fd:57:
                    6b:78:62:e8:c2:8a:8e:fb:0e:cb:b5:22:72:e3:3d:
                    f1:75:be:85:d7:8a:b1:46:76:71:bc:e9:1b:2c:ee:
                    3c:a2:02:02:77:88:0a:b4:b5:72:bb:22:95:86:cb:
                    35:b0:2e:1b:06:c4:27:81:2a:6b:c2:70:00:43:56:
                    3f:4c:23:7c:33:3a:8e:b2:87:5e:5c:34:37:bc:27:
                    b8:2a:20:63:02:1b:57:8a:b2:d3:c1:92:44:2d:17:
                    3c:ac:35:a7:8b:93:75:b1:80:45:e6:79:2a:71:51:
                    bd:b4:99:e0:62:28:3f:99:14:ce:a4:84:9f:1f:f0:
                    97:ad:84:30:94:06:e3:78:6a:f1:b8:15:6f:f8:59:
                    9f:39:a5:e1:f1:e7:74:89:39:0f:21:87:20:38:34:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:12:78:CC:E7:98:59:F3:EB:DC:FC:05:1A:FF:1D:FF:7B:2E:22:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0484b69e-3299-3a63-83c0-3208ba679f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:6a:41:8a:d6:c7:2f:6e:68:1d:d8:61:16:d9:33:33:fb:
         40:67:6e:98:97:ea:4a:c6:0e:3e:ad:e8:96:b2:95:c9:e6:2a:
         11:c5:45:20:15:4c:8b:90:33:a4:44:51:51:56:ac:24:2d:de:
         ef:e1:65:1c:ea:ed:7b:89:a8:ec:9c:3c:26:9c:22:41:05:d7:
         17:dd:c6:6d:75:08:c2:1a:49:60:0f:b4:b0:07:3f:fe:ed:86:
         97:c4:86:a4:ef:de:e7:f1:26:ea:d2:0a:cc:ee:c1:c8:69:e8:
         4e:5e:7a:2c:09:e5:c7:d0:14:52:0e:a2:e8:f6:c4:5b:e9:57:
         c9:08:0c:c2:52:b8:80:d5:f8:34:98:55:6d:89:08:f6:a3:dd:
         75:0d:06:ed:ef:64:50:0c:ba:87:fa:11:b7:8c:6d:84:e3:f3:
         e4:ed:59:75:01:88:52:b5:07:f1:55:91:72:0a:78:3a:50:cb:
         ed:72:9c:06:d5:0d:3d:a7:6a:ba:80:ae:cf:f0:29:f7:93:57:
         0b:a3:f7:8d:b8:21:17:60:fd:02:80:25:44:1c:9f:77:00:e6:
         28:3c:5a:c5:af:a7:13:13:23:fb:d2:de:4a:bf:7c:90:92:b2:
         1f:52:c6:d1:78:be:75:cb:c7:77:92:47:c6:0b:1b:92:be:e9:
         52:ad:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:52:38 2025 by rpki-client