Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa
File:                     1d613ff7-72af-39e9-af69-1539a839eed6.roa (raw, json)
Hash identifier:          mdmwMqCqpJPoTrNkEHeeq0yc2ky5ukWFUQeWX92cdk8=
Subject key identifier:   17:F6:D8:96:54:13:FA:B2:0D:14:30:7D:6C:20:AF:91:27:D6:D3:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D97667961E9AB0688480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2600:1007::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d9:76:67:96:1e:9a:b0:68:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=430f7389-d0d8-415b-9e6f-3dc611fc55eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5d:35:68:85:62:c9:d6:74:a2:db:80:51:db:
                    41:b8:a0:06:b2:90:5f:0a:58:fb:c9:73:87:a9:73:
                    00:bb:4c:35:63:32:61:03:d2:ec:24:37:59:07:07:
                    51:d7:46:70:67:20:36:8a:6d:84:f5:18:7c:96:5e:
                    c1:a3:31:33:32:72:ce:f8:2c:0d:a0:f6:f1:dd:5e:
                    e9:43:41:64:d1:a3:50:60:9c:07:bc:dc:7d:cc:f7:
                    74:c9:b7:9b:b2:cc:9a:9d:72:9f:32:d6:b3:dd:5d:
                    d5:d5:ad:c8:3a:7b:88:ba:36:73:d4:0b:0c:d0:84:
                    18:8a:92:71:fe:95:16:74:9a:57:4e:5a:c8:b5:7a:
                    3b:1f:44:6a:f7:58:70:72:77:49:36:c3:99:96:83:
                    7c:83:87:ed:af:07:d3:1f:dc:91:72:c7:cb:f4:2d:
                    f8:d1:a9:d0:93:d3:4f:72:18:79:94:a6:1e:9c:90:
                    7c:ea:c8:fd:97:cb:71:61:ec:1c:f0:04:9c:80:42:
                    54:10:4a:ab:79:12:4a:a9:1f:91:2f:03:5c:52:c8:
                    a3:80:ef:17:79:ce:e1:4c:ac:34:79:9f:2e:9a:ec:
                    b6:05:36:e1:4b:d4:07:f0:84:83:59:7d:c2:90:fe:
                    0d:dd:70:6d:e6:57:e6:47:e9:76:ea:cf:62:6b:95:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:D8:96:54:13:FA:B2:0D:14:30:7D:6C:20:AF:91:27:D6:D3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:34:16:73:da:2e:16:c9:36:57:e0:c4:67:28:fc:62:4c:
         12:ab:7e:de:52:3a:97:70:a8:63:d0:b0:79:8f:d8:23:82:b5:
         97:18:dc:fa:f9:e1:04:bb:66:8f:21:f9:56:93:e5:d8:0c:13:
         e2:87:c9:fd:9f:43:cc:16:ef:5e:ef:76:7c:5e:b2:14:be:25:
         a7:45:af:40:b7:5f:20:e8:04:ab:12:38:14:52:82:7e:0c:48:
         5d:88:cf:32:69:a2:21:a0:27:9c:d2:ce:c6:be:78:1c:d2:e6:
         ed:ff:ee:8e:ef:d1:3f:59:b9:a9:ba:9d:75:a5:d2:a7:1e:dc:
         bd:30:9f:f3:5f:47:b4:ab:3d:db:ad:4e:28:66:8f:8a:1e:a4:
         3a:bb:09:8c:a6:e4:8c:f6:9d:94:29:79:34:0a:ec:0a:3d:1f:
         36:bc:8d:14:2c:c3:84:ab:91:07:34:3c:7f:c8:37:f2:5e:f9:
         c0:5a:29:e1:f1:59:44:f3:89:cd:2a:e6:ed:a6:85:df:11:7c:
         e1:08:10:3a:dd:96:31:88:38:cb:11:d5:4d:4d:97:29:84:2b:
         b6:d8:70:3d:70:b0:28:24:86:b4:63:34:30:78:54:75:c6:8f:
         7b:86:4f:87:da:d8:86:a4:44:79:db:05:6b:1b:43:9f:56:6a:
         5e:da:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:41 2025 by rpki-client