Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa
File:                     2effd435-394e-3905-b681-3853cb36fdd1.roa (raw, json)
Hash identifier:          Py7il+RAKcHCZH+6IFm/CDRJzIi+50yZO3onbJcGga0=
Subject key identifier:   AD:7C:83:77:9C:F2:35:6C:A1:31:5A:36:41:D4:B5:85:16:29:82:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245C835EB70C163F505400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1005:b1a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5c:83:5e:b7:0c:16:3f:50:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=b538acbb-9b12-4471-8612-d70e8c93827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:da:ed:fe:b8:b0:dc:69:65:27:0e:6d:80:c0:
                    b9:0f:7a:73:55:0f:c7:0c:29:52:1a:c8:1e:aa:2a:
                    82:ee:d2:51:77:85:97:ff:f8:15:5e:d3:c5:f4:9c:
                    eb:62:53:6d:08:18:bd:65:66:09:3d:08:64:d0:17:
                    89:c1:49:46:7e:0f:bc:27:b8:f8:ac:e7:4b:e5:ba:
                    36:90:dc:d1:0d:8a:b7:67:88:c7:83:af:c0:f4:4a:
                    d1:21:e8:05:b8:24:56:cf:ad:eb:82:dd:99:52:3f:
                    ce:27:0f:96:58:4c:c8:e0:36:0c:18:ff:67:15:96:
                    ab:28:f9:2c:b3:3b:c4:75:9a:dc:0f:92:28:27:4b:
                    bf:a3:1f:4e:4b:9a:8c:62:d7:75:14:fb:6b:96:c7:
                    64:76:2a:88:58:71:78:df:a5:09:b2:8f:fb:1f:e5:
                    17:63:28:87:c4:80:c3:fa:ea:7f:dc:e6:76:df:5e:
                    f6:98:a3:ca:10:4e:9b:38:e9:02:ad:58:7b:ef:6c:
                    6c:ba:67:86:65:f3:4a:0e:0c:df:8d:33:df:49:1a:
                    7c:2d:38:35:4d:9c:56:4d:c7:91:7d:e7:a8:cf:76:
                    2e:fd:0e:fa:21:d6:da:fd:50:fb:77:22:6d:66:f8:
                    1e:49:7b:4e:b8:96:8e:06:8c:d1:12:ec:1d:2d:bd:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7C:83:77:9C:F2:35:6C:A1:31:5A:36:41:D4:B5:85:16:29:82:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b1a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:ba:f9:42:b3:55:d8:47:57:89:39:5c:c9:21:bd:b3:3a:
         eb:4e:75:ce:ba:97:00:99:57:60:0a:60:32:3e:0e:03:f4:dc:
         b1:22:78:45:d3:ec:e1:51:e7:eb:0b:45:c5:73:f3:36:29:fb:
         e5:3b:f8:34:31:42:82:f4:a3:67:88:5c:81:61:48:ee:03:d2:
         ee:89:af:e7:ed:ef:a1:89:de:81:92:83:3c:b6:ab:68:9a:bf:
         92:94:aa:09:c2:01:5c:6a:0b:db:c3:3f:9c:e2:c5:2d:24:4d:
         6c:ab:63:cf:c7:f6:ee:97:98:f1:62:4a:9c:5e:47:1c:90:10:
         be:21:82:fb:2a:2e:59:65:f6:ce:ba:54:82:4e:72:2b:83:84:
         68:5d:b2:ae:22:6f:e9:94:9e:04:a2:dc:f9:e2:aa:96:85:22:
         6c:c1:23:aa:4b:be:d1:9f:8f:6e:90:73:3a:a4:c2:fa:ff:06:
         99:c2:34:ca:1e:60:81:8a:a9:2a:d1:03:6c:bf:29:50:93:a8:
         c0:5f:3d:79:8f:bd:63:24:18:09:52:24:b2:a8:1c:02:f8:5c:
         ca:76:51:02:b9:2b:2c:d8:8b:18:52:90:32:01:bf:e9:42:5a:
         fb:62:2e:91:ad:bb:15:f4:94:68:5a:01:68:a9:68:c0:56:9b:
         44:35:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:40 2025 by rpki-client