Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa
File:                     1fc95477-2fdb-3460-8609-84a9e99b0a40.roa (raw, json)
Hash identifier:          jrDdnNWGS0cMwz+Wk1ke3SyfU4gMGfq1UebHrRwNSIc=
Subject key identifier:   7D:83:9E:CB:2C:66:53:77:AE:5F:78:93:77:61:51:D4:08:FC:BF:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E8E877EA3AAD6AEB3780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100c:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e8:e8:77:ea:3a:ad:6a:eb:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=485fa9af-470a-4970-980c-0cce92b654c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:cd:33:0d:d5:cd:96:da:83:b0:0a:10:2e:
                    c5:13:58:99:4f:ce:9b:71:31:92:dc:7f:77:75:67:
                    a4:4e:ee:2a:83:3b:1b:82:d1:ec:16:3b:4c:91:97:
                    d7:a9:04:fc:04:0b:fa:53:12:5e:37:e1:a4:fc:69:
                    90:67:81:e0:54:de:7f:d2:03:f7:7a:e5:c6:aa:7f:
                    b2:3c:8d:ae:f7:ad:fb:5a:59:b6:e8:e0:fc:77:23:
                    fc:13:6f:4b:ff:43:20:d1:fe:d3:f2:1e:5d:7d:08:
                    ba:aa:03:c3:1f:ac:ed:d7:36:92:0d:39:4a:94:64:
                    4f:6a:7f:ba:88:88:4a:08:96:6e:fc:e7:f4:3f:ce:
                    58:10:12:d0:44:96:c3:00:1b:30:17:6f:76:c2:04:
                    34:9d:e4:43:5f:53:76:0e:b8:3b:bf:6e:e8:18:e4:
                    48:b6:ad:8b:c4:0c:fb:39:d1:49:13:1a:d6:87:fc:
                    98:43:01:f5:41:6f:e8:bb:8b:da:52:c8:3f:75:d6:
                    f4:2b:2b:fa:dc:da:e8:60:65:bc:5e:7c:bc:d9:37:
                    2a:99:06:bc:fc:16:76:91:5f:c8:68:ca:9c:fb:f2:
                    65:1d:d4:a5:7b:98:39:d9:41:b3:8b:d7:15:a5:10:
                    e6:ba:d5:42:d7:70:79:72:cb:c0:c3:4e:91:aa:91:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:9E:CB:2C:66:53:77:AE:5F:78:93:77:61:51:D4:08:FC:BF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:32:e6:c4:27:2f:70:9a:30:95:fc:43:ea:2a:73:11:90:
         75:cf:71:57:a0:7c:a4:ba:80:d5:ea:09:0a:8b:a8:4d:6c:f0:
         72:7e:5d:11:87:16:a6:fc:88:e8:f3:3b:c2:0d:52:59:89:4f:
         f3:25:a3:06:c3:36:1b:c7:2b:e2:6c:59:b5:91:63:1c:10:55:
         07:76:6c:10:ed:29:3a:12:48:60:cc:2f:63:7f:16:13:d4:ce:
         d4:2a:d1:d9:9a:f8:f9:ba:c1:80:c9:69:ea:f9:b8:51:5b:77:
         ca:bd:53:45:2e:95:cf:d8:c5:ed:1e:d4:69:25:e7:64:fd:a5:
         a7:fd:90:a8:76:1a:9c:fe:a8:86:02:e9:fd:ca:a3:cc:e2:d0:
         74:ba:c4:25:a7:05:59:9d:20:45:ef:03:52:d8:70:f9:f7:5f:
         62:09:fb:27:93:59:fe:02:b3:d1:42:1e:95:6b:6f:05:f6:49:
         07:28:f5:f9:f9:95:37:20:c3:b5:7a:7b:50:12:75:f3:8f:cd:
         bb:af:b7:d0:eb:a7:29:e3:76:a9:17:e7:c8:4d:9a:2c:a2:ca:
         da:13:5e:c5:70:09:38:5e:e7:53:75:3c:28:2e:9e:77:19:f9:
         bf:6f:7d:63:34:e8:21:49:f3:0b:ce:d1:b0:be:45:ff:38:65:
         ba:d7:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:10 2025 by rpki-client