Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353064ab-f628-32d7-a9ee-b9ef09807c1d.roa
File:                     353064ab-f628-32d7-a9ee-b9ef09807c1d.roa (raw, json)
Hash identifier:          zsxVHvJcCrjI6XHpmHDdnfB9YOBLQN2K3NDaW4F0Vec=
Subject key identifier:   97:48:42:70:A1:0F:33:2D:39:14:B5:52:69:3F:FB:5E:9C:C4:0F:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245B2C3053996EFD2BF9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353064ab-f628-32d7-a9ee-b9ef09807c1d.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1005:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5b:2c:30:53:99:6e:fd:2b:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=812943d4-7e11-4d59-bb58-83730e8bbb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:02:bf:01:f6:2a:49:b6:81:39:1d:82:fa:
                    06:2a:4a:ed:6d:cc:87:31:5d:76:ae:ec:79:43:5c:
                    db:8b:e9:e8:9c:86:ba:09:ec:78:e2:3a:fc:b8:92:
                    2f:72:6a:95:0b:0e:eb:d9:b2:d0:06:54:fd:80:4c:
                    00:1c:45:4c:76:64:2c:24:8b:8d:46:53:66:c4:09:
                    2a:61:ed:32:15:8f:a1:51:01:0d:eb:8c:6e:b0:a0:
                    14:6a:53:90:c2:16:79:2d:90:41:48:ae:a4:5b:06:
                    89:77:8b:cd:f0:c5:eb:12:af:ed:54:36:0a:32:34:
                    eb:c0:ac:99:13:e4:a3:41:ba:4d:12:f8:58:71:20:
                    e5:55:e7:ce:34:89:c3:3e:ed:33:41:af:c8:a0:e2:
                    e8:9e:10:28:0e:ef:f2:1f:de:99:df:5b:0e:60:35:
                    0d:4f:fe:e0:95:fe:fa:25:2c:a0:3f:8b:90:f7:03:
                    e9:43:ef:f8:a8:94:5b:d1:1b:e2:dd:d6:98:29:71:
                    ea:40:61:03:27:d1:11:36:2f:b0:c5:9f:a2:02:a8:
                    39:99:92:88:7d:3a:14:19:5a:8f:97:0f:da:ec:0e:
                    14:a3:82:28:7e:d4:f9:f1:d2:1f:5a:8b:71:02:d7:
                    ca:af:ab:9e:57:91:a5:64:76:30:64:21:1c:e8:73:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:42:70:A1:0F:33:2D:39:14:B5:52:69:3F:FB:5E:9C:C4:0F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353064ab-f628-32d7-a9ee-b9ef09807c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:25:d4:3e:7b:0c:0b:06:7f:4b:bf:47:84:e8:db:86:ae:fb:
         10:ad:91:c9:c5:d2:30:2e:cd:27:ea:a8:e5:2d:29:36:bd:cf:
         04:f0:a1:fd:46:3c:d9:99:81:46:06:25:fc:ff:30:f9:a2:77:
         ac:7c:c9:1b:5d:62:e2:29:79:7b:ed:49:49:ae:7a:34:42:f6:
         55:66:6a:36:b6:e9:82:58:bc:ff:09:26:7a:86:d0:29:fd:9f:
         2d:a7:9e:21:18:cc:2e:69:08:cf:0f:2a:3b:65:04:28:75:74:
         00:14:8b:55:c1:9c:13:8c:da:c5:9f:0a:f7:a0:16:b2:9d:dd:
         0b:8a:95:af:36:87:76:d1:19:d8:b7:ea:9f:cf:6e:2d:1f:29:
         95:0c:a2:d5:3b:cf:a2:33:ff:b1:95:a1:28:29:f7:60:10:b8:
         e9:a6:67:ed:c0:63:e3:f4:64:5c:c4:9a:20:f1:fe:ec:c4:d3:
         bf:2c:d9:a1:e4:b5:2a:13:1d:3a:bf:cb:a4:28:22:a5:02:c7:
         72:d2:ce:d9:4f:20:ce:88:88:c8:16:64:61:78:a4:16:8c:75:
         20:ca:e5:0c:53:1c:21:92:04:c0:be:4b:8e:34:e8:51:bd:68:
         f0:43:03:15:90:78:3f:51:39:2d:f2:06:41:5d:48:c6:83:9b:
         59:16:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:49 2025 by rpki-client