Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa
File:                     3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa (raw, json)
Hash identifier:          m73OqPlMcrNy/7UvwYKOJBvoV/Kv/bRSzFGGkEDRKzU=
Subject key identifier:   E2:62:F1:0A:D4:0B:95:BE:D4:B3:60:FE:CD:6A:D7:46:3E:C6:A5:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E5BCF0D95C5D2AED1380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100a:b0e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e5:bc:f0:d9:5c:5d:2a:ed:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=6d94f862-c9c1-4a2b-b5f9-6387fd00b39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:b7:6a:88:f1:0c:15:aa:da:dd:9c:e4:c6:
                    15:d8:34:63:11:f6:89:85:4d:d8:b2:3a:69:43:63:
                    9c:d6:64:73:9e:cd:4d:b0:59:7c:4b:90:ab:4f:72:
                    b1:30:67:3c:9c:94:9f:20:3a:79:f5:ca:7d:1a:8b:
                    bc:16:00:93:e1:82:fc:de:7e:86:d2:64:fb:5d:fc:
                    cc:03:ea:29:19:70:03:82:1f:b0:dc:c2:66:6c:df:
                    bb:8c:bf:60:f7:c4:0f:a2:2d:ea:ed:ea:46:77:01:
                    95:29:fd:9f:1f:88:ca:c5:ee:d9:5f:7d:6e:7c:4f:
                    8f:91:2e:0b:8f:99:79:61:f0:a2:5b:45:03:f9:62:
                    94:3f:1c:70:97:f2:00:aa:8a:46:38:6b:de:76:b8:
                    77:9a:a2:cf:94:9c:2a:2d:94:1e:09:76:cb:9f:85:
                    c1:00:90:d1:1d:2e:e5:69:62:d6:34:32:1f:db:30:
                    ee:eb:77:08:62:eb:42:e9:91:5e:39:ef:3c:fc:ee:
                    0f:bd:73:11:41:b0:4a:39:e3:af:39:34:af:5b:b6:
                    3c:e1:8e:c5:cd:8d:ef:bb:51:f8:b1:ff:34:97:62:
                    4e:f8:40:f4:c6:e0:cf:ca:d0:ff:d9:2d:ba:ba:12:
                    70:46:50:6e:ca:44:5d:68:ae:e6:f5:f4:f9:62:99:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:F1:0A:D4:0B:95:BE:D4:B3:60:FE:CD:6A:D7:46:3E:C6:A5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b0e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:c0:fb:63:b0:bc:ad:c3:c7:1a:74:da:11:7e:24:3e:f4:
         a0:79:48:6a:f7:b6:ad:bc:68:e9:4e:86:b1:d5:79:da:36:36:
         60:be:86:a2:40:37:c0:21:16:60:11:b5:65:2c:ec:13:0a:21:
         d9:11:29:15:9a:00:4b:56:12:17:48:76:93:a5:00:7a:ae:fa:
         d6:2f:dd:9a:15:a0:21:91:6f:d9:2a:f9:aa:09:76:d3:85:e9:
         b7:3e:31:ab:56:57:1a:1f:c8:49:17:89:31:56:65:06:fa:cf:
         11:e1:cd:52:e2:df:74:05:75:9d:66:37:50:b0:70:e6:c4:6f:
         aa:92:42:18:eb:2e:06:9a:f8:76:28:0f:f9:d8:10:db:3a:b1:
         ff:99:12:d4:4a:fe:79:44:73:58:a8:0f:b8:22:67:e8:70:e8:
         3d:50:1e:1b:44:29:e2:67:c5:69:da:a7:3c:34:e0:78:38:43:
         f8:43:2f:30:4c:cb:e4:cb:b3:b0:68:29:3d:8a:69:31:b4:9d:
         71:f4:5d:83:fd:cb:8f:de:3b:45:bf:b9:34:88:7a:f6:43:d4:
         55:16:09:94:cf:00:86:81:e8:d2:d8:4b:7e:de:75:36:d0:c1:
         ed:59:2d:4e:48:89:71:0d:a8:3a:ff:6b:92:21:41:d5:2e:5b:
         7b:71:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:00:05 2025 by rpki-client