Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18a36223-5f1d-3fd5-9311-b04f07915ac2.roa
File:                     18a36223-5f1d-3fd5-9311-b04f07915ac2.roa (raw, json)
Hash identifier:          WkMaGwCXuQO0YO1wUCOFVLLsm8Hix05AdaeNsSYucGs=
Subject key identifier:   33:DB:30:17:7E:F6:3C:FA:84:70:91:B4:F1:0D:43:86:A0:14:A2:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9FAC80F5D429541C1B60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18a36223-5f1d-3fd5-9311-b04f07915ac2.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1011:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9f:ac:80:f5:d4:29:54:1c:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=6f0ef1ef-79d2-460a-a53d-e886158b615b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:50:16:98:6b:b1:f7:40:94:0a:17:2c:c2:
                    b8:a2:b2:59:0f:3f:90:f9:a4:80:05:bd:44:bd:5f:
                    4b:65:61:a0:29:c6:29:5b:8c:5f:0c:22:70:42:0d:
                    0f:bc:7c:19:ce:51:27:2a:53:eb:e1:f2:8a:64:22:
                    09:dd:fe:df:44:53:ed:2a:79:a7:b5:d6:2e:f0:3d:
                    5b:55:f0:07:bf:1b:51:df:cb:4f:2d:5b:a9:b4:93:
                    33:25:54:92:4e:28:49:0b:41:a3:34:a3:d4:ec:92:
                    af:61:4e:5c:2a:7c:71:c8:5a:3a:88:e5:a1:91:75:
                    42:9f:64:be:ce:6c:97:de:e9:0e:44:c0:17:28:f5:
                    10:c0:2f:eb:3f:9e:29:e1:09:ae:88:ff:84:75:0a:
                    d6:66:d4:a5:bf:b3:ec:c3:9e:76:05:eb:70:3a:99:
                    8e:20:23:de:92:f8:26:46:54:31:04:a8:3f:7f:3a:
                    9a:40:06:a6:6d:45:ef:ed:a3:38:5a:ca:fb:1c:b6:
                    ec:4a:c4:95:d7:7e:bd:bc:30:9f:0c:10:5b:5b:82:
                    e2:d9:62:da:60:e1:f4:c8:0b:f3:0e:45:61:9a:c3:
                    f1:d1:4d:30:a3:6b:14:4e:33:8f:63:29:46:4e:c7:
                    ed:92:39:74:b9:ee:d8:fe:57:e3:a1:85:a7:01:78:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:30:17:7E:F6:3C:FA:84:70:91:B4:F1:0D:43:86:A0:14:A2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18a36223-5f1d-3fd5-9311-b04f07915ac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:50:1d:d4:51:56:a3:61:54:15:0f:e0:61:e5:aa:62:62:3e:
         ba:3f:96:b8:b0:2c:8b:94:13:ec:1a:cd:87:9c:1a:9b:e3:ff:
         2c:ce:ce:e4:68:af:f0:fc:0a:b4:52:1c:58:01:53:14:d8:94:
         e8:cd:0d:65:f4:91:40:e7:c7:1a:cf:bd:2f:8c:46:94:5a:63:
         b7:20:15:e5:2a:f1:00:57:b8:12:3b:45:1e:6a:24:76:e0:f4:
         73:35:0f:86:5c:3c:72:70:db:27:7b:7a:ac:8c:a6:cc:3c:b6:
         4d:17:90:9e:a4:e9:0f:98:d5:47:cf:cf:bd:e3:b2:a2:d9:97:
         79:9f:84:01:e8:73:6e:8f:01:d9:c1:61:4e:0e:a0:11:46:9a:
         fa:ae:04:39:27:fe:27:60:22:8a:14:8c:80:bd:56:1f:dc:ff:
         4d:67:71:56:33:19:e5:9b:8f:ff:b3:95:fb:c8:80:9c:c1:4f:
         63:62:a7:5b:85:58:ce:94:01:df:5c:34:5b:61:d0:3b:30:b4:
         51:b0:5e:5e:e5:79:77:d8:5f:c6:34:ff:46:2b:ef:5f:ea:16:
         54:fe:3e:25:9f:50:3c:7c:bc:97:25:ca:a9:6e:8c:07:03:2b:
         e7:83:2d:a7:9b:0d:d7:00:e4:54:f9:6e:a0:e0:d9:20:4a:58:
         e0:af:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:32 2025 by rpki-client