Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33489bce-7175-3cfc-acb3-ea35fb80b299.roa
File:                     33489bce-7175-3cfc-acb3-ea35fb80b299.roa (raw, json)
Hash identifier:          l5sscUhTVLz27g+tL/XfUjUoWtlOH15TzUiKKacbvLI=
Subject key identifier:   11:F5:C5:E8:93:35:CC:10:9F:EF:42:ED:13:20:BC:3E:AA:FC:9D:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245D940306000CAA287820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33489bce-7175-3cfc-acb3-ea35fb80b299.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1006:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5d:94:03:06:00:0c:aa:28:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=9295d4f0-8214-4afc-94d4-a89b3090bd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:fd:c3:7f:4c:43:4e:66:4c:81:1c:21:d4:
                    e0:1b:92:14:22:26:88:a1:fa:64:d4:f2:51:bd:ea:
                    3c:61:8c:7d:e5:26:b9:6a:81:b3:26:1d:33:ed:ef:
                    f8:21:23:e7:c9:8a:95:56:70:87:5d:cd:91:15:d5:
                    a1:49:92:80:2b:b9:b1:17:1a:22:61:ff:a4:27:dc:
                    7d:55:2f:39:27:df:e6:ab:fe:8b:57:40:fe:e9:d9:
                    49:af:80:cb:29:9c:87:81:18:cf:ec:44:75:08:24:
                    63:15:3d:7f:34:48:eb:6e:0b:0c:a7:78:f1:0a:60:
                    8a:17:87:53:3a:6a:47:37:5d:11:e3:ef:3c:ba:fe:
                    a0:38:af:3e:43:e7:ec:ab:ad:ff:61:88:e1:7b:37:
                    40:9a:9d:9e:5a:30:c3:a8:b3:55:9a:86:5a:51:14:
                    44:bc:6d:c6:a1:e6:74:30:5e:3f:46:7a:c0:56:c5:
                    99:fc:e8:b6:c5:82:21:3e:b8:e7:16:bf:a1:88:ee:
                    61:7f:4e:14:79:94:6d:06:4d:15:a3:85:8f:56:ab:
                    b1:c1:c9:f5:56:d2:ea:4a:44:46:ec:ec:ee:e7:db:
                    7f:5e:fe:0f:78:fc:09:9c:1e:c0:e2:ec:e4:7b:83:
                    8e:17:39:ed:be:bb:50:df:b0:67:30:19:da:66:d5:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:C5:E8:93:35:CC:10:9F:EF:42:ED:13:20:BC:3E:AA:FC:9D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33489bce-7175-3cfc-acb3-ea35fb80b299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:e0:d2:f5:18:5b:40:08:4d:22:fe:28:4e:02:5d:03:e5:
         34:4c:2b:1e:7d:74:63:5b:58:0d:47:07:32:bb:da:e0:f3:15:
         8d:ff:53:1f:e7:bd:79:18:3d:72:95:ee:45:ff:72:37:64:bf:
         aa:40:6d:e0:6a:fe:ee:2a:9f:1b:53:a5:d0:99:e6:fa:96:b3:
         db:3c:0a:7b:f8:09:3c:ae:ac:1f:79:d8:87:d0:c8:e6:84:62:
         3a:53:23:68:f3:b2:44:03:f4:ea:79:35:8a:16:41:5f:89:bb:
         9e:79:ff:20:04:f0:31:81:b3:ee:67:df:2d:00:d2:56:63:4f:
         8a:3c:32:04:73:ea:cd:30:f5:85:df:d5:9c:78:d5:b9:9f:9c:
         88:37:9f:14:45:cd:a5:b0:63:2f:56:9d:8e:c2:49:2d:e9:4f:
         b2:7e:56:63:33:dd:27:a7:8c:89:45:d6:81:52:ad:c2:89:0b:
         df:d6:13:b2:a9:1e:6c:bd:2a:33:2e:9d:5e:a1:43:db:d3:76:
         3a:87:6a:74:66:04:fc:af:a6:13:b8:bb:ce:99:48:76:05:8e:
         e2:3a:eb:67:e0:e5:89:09:6f:d5:38:81:b9:2a:ae:29:41:27:
         f4:3b:f6:28:00:3b:92:4d:5c:40:71:a9:75:6e:c4:da:82:5d:
         a0:ef:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:28:27 2025 by rpki-client