Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fd38517-e017-3612-8b01-80791323c14d.roa
File:                     0fd38517-e017-3612-8b01-80791323c14d.roa (raw, json)
Hash identifier:          KqGzH6jB5EiXbT5hHw5mhQB0TUT/UCGiYyAqhXQVRPY=
Subject key identifier:   3B:C0:90:7E:A0:17:E3:A9:16:F5:3E:49:AE:E9:AE:7B:DA:30:7C:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9CABD4E262B1CF8BB800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fd38517-e017-3612-8b01-80791323c14d.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1010:b0b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9c:ab:d4:e2:62:b1:cf:8b:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=c8997f15-78e3-4fba-9515-52021b0a86a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:af:69:dc:59:a5:dc:30:e8:1e:fa:6e:97:
                    18:ec:81:b3:71:b3:d5:c5:15:0d:9a:7a:7e:5f:96:
                    78:2d:78:91:30:09:0e:55:f9:c0:50:f5:e5:47:43:
                    77:51:90:30:77:75:47:06:04:04:47:95:fb:c6:63:
                    11:4f:90:7b:6c:d6:e6:14:aa:e2:62:8e:4b:9c:d4:
                    d6:1d:1b:d7:06:15:19:b2:f5:8e:b4:00:37:fb:b0:
                    e6:f3:82:68:f4:e2:e2:46:11:34:46:cb:60:5d:67:
                    8e:ee:d9:59:66:26:86:4f:f5:1a:3a:0d:90:d8:30:
                    23:ad:85:92:ff:53:de:c2:7a:13:81:a7:fb:43:d4:
                    e5:7f:c1:26:2e:85:55:cd:d3:36:e5:ca:39:4a:23:
                    ff:c4:65:9a:5a:9b:b8:4e:00:bd:18:45:54:6e:05:
                    77:bf:f5:8e:55:d1:76:7b:fd:af:b3:95:b8:6d:7e:
                    0a:10:f8:14:5d:e2:a3:60:1e:de:41:c9:1d:1b:7a:
                    4d:21:7e:8c:30:7a:bc:47:19:0a:24:4e:30:fc:e5:
                    13:08:07:48:1e:79:a8:9b:78:6f:68:02:03:52:85:
                    8e:19:da:56:b1:2e:f3:bf:57:c9:81:13:ff:d2:b6:
                    35:38:a1:d8:9c:89:7e:93:e4:2f:ea:43:69:78:22:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C0:90:7E:A0:17:E3:A9:16:F5:3E:49:AE:E9:AE:7B:DA:30:7C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fd38517-e017-3612-8b01-80791323c14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b0b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:eb:96:0b:65:8a:e8:d2:4d:9b:c4:fa:cd:f3:bc:0b:f5:
         1c:b1:da:ee:dc:de:73:c8:34:77:64:4e:86:7a:44:2f:1f:85:
         8d:6a:1a:61:37:87:f0:85:12:dd:21:9e:7d:19:55:d8:e0:c6:
         36:ad:73:61:ce:17:27:7d:10:0e:2a:dc:60:c4:45:ff:79:f1:
         06:a7:fd:22:9c:84:10:0d:1f:be:f5:a2:a3:30:6f:2a:ce:65:
         7e:08:5f:a2:02:28:61:2e:ce:ed:d7:33:67:06:2e:f8:cc:7a:
         d5:17:89:8e:0e:bb:c7:44:52:44:0a:5c:8f:c7:80:de:6a:4b:
         cf:90:90:ff:d6:34:b5:12:40:7d:f4:3a:2d:ed:86:fa:99:5a:
         4a:2d:36:3b:ff:a0:7c:42:c3:76:82:a3:10:d4:ee:f5:d2:49:
         b7:28:07:ce:30:b8:4f:32:88:34:0e:d2:96:80:91:c5:07:61:
         61:07:45:d3:94:be:cd:bb:ae:b0:68:40:fb:bf:e9:fb:06:d2:
         68:6c:84:96:d5:20:b3:a1:43:5d:a4:85:da:ad:a6:60:26:f3:
         57:e0:29:34:c0:43:cf:8f:4e:55:9e:cb:40:ae:86:cc:98:23:
         5a:62:86:75:d2:a8:ee:02:0e:c5:a7:1f:cb:6c:6b:76:84:e7:
         8b:7b:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:36 2025 by rpki-client