Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35996c38-2897-390f-b050-03cd236b8ab4.roa
File:                     35996c38-2897-390f-b050-03cd236b8ab4.roa (raw, json)
Hash identifier:          g4ve4YDdyMkU9DTQdu1zXzaTA6fc9G2Dfm5uQ9Y0DJM=
Subject key identifier:   23:47:3A:A6:DB:08:03:F7:BE:0D:E4:83:CF:57:22:74:42:2E:04:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2460EA625E042800E85F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35996c38-2897-390f-b050-03cd236b8ab4.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1007:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:60:ea:62:5e:04:28:00:e8:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7ef70539-a8d2-4c4f-9c84-38f0975a843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:37:cd:b6:e8:0b:7d:6b:f1:47:a2:fa:94:
                    c6:e7:cf:85:64:04:8d:49:8f:71:3c:46:7a:62:26:
                    48:2e:72:21:39:a6:c5:fd:3f:bf:33:64:84:42:a9:
                    f9:4d:22:49:ee:ad:7d:06:f1:f5:0d:78:61:16:b3:
                    9a:63:ad:05:0c:d0:fd:c2:89:22:d9:e3:c9:92:b1:
                    3d:48:ae:61:b0:9d:0d:94:0a:cd:a2:b5:3d:62:9e:
                    b0:6d:0d:b3:47:7c:f1:7f:59:e3:d5:4b:f2:b1:16:
                    77:ce:d9:06:02:7f:2f:79:af:4f:45:31:00:95:d4:
                    b2:c9:e9:c1:a0:a5:9f:db:09:1e:93:49:09:6b:c2:
                    2a:2b:13:6d:a0:de:8d:ce:d1:79:91:9e:fd:cf:36:
                    4a:c5:ea:82:34:58:49:72:53:08:e3:b7:d8:ae:3f:
                    db:8b:c8:27:74:d8:f8:2e:2a:65:d7:db:df:0b:74:
                    fb:43:01:cc:1e:62:5a:d4:46:12:fb:28:eb:f5:ff:
                    c4:5c:85:1c:57:f4:7b:89:b5:a8:d2:e5:e4:8a:1e:
                    84:0b:5d:13:25:98:58:7b:eb:58:40:2a:17:f7:28:
                    50:63:9c:d2:dc:1e:f0:7d:50:78:62:50:bc:da:4b:
                    eb:9f:7e:52:33:32:99:e0:63:20:15:be:cc:85:d4:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:3A:A6:DB:08:03:F7:BE:0D:E4:83:CF:57:22:74:42:2E:04:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35996c38-2897-390f-b050-03cd236b8ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:2c:7d:f4:4d:2c:e2:f8:a9:e0:df:a1:53:ce:24:e1:3b:
         79:49:b8:fd:1b:4d:6a:d4:55:89:6b:7b:86:3c:63:85:9d:62:
         fe:4e:d4:b4:bd:ed:e5:73:c7:7e:21:32:cc:c0:11:db:21:89:
         82:66:6c:f5:79:4a:03:e8:68:56:c1:2e:0a:5c:de:28:08:cf:
         b6:25:06:fa:07:c2:cf:ea:8b:b7:78:1a:c8:f5:39:61:48:3e:
         19:df:91:e2:33:c1:00:66:c0:4e:fe:61:a4:85:85:03:26:0d:
         94:1a:68:97:7a:f4:cd:9c:10:9c:73:05:77:d1:02:ea:11:ae:
         d1:bb:72:ec:df:c3:65:45:80:ab:ff:50:82:e7:08:bb:58:98:
         c4:a5:ca:5f:28:d8:57:09:ec:bd:f5:bf:7f:80:b3:65:72:76:
         ba:49:f7:55:b5:24:59:c7:50:bc:58:b8:3c:4e:19:d9:69:d0:
         c4:ad:57:78:f2:c1:53:33:77:ec:a1:6b:89:a9:04:42:53:38:
         23:b4:40:b8:82:13:69:7e:33:b7:83:40:74:bd:44:82:37:15:
         b8:b1:a2:2c:86:fe:a3:d9:32:0e:f1:ab:f9:b2:1a:19:ea:0e:
         11:9c:5f:03:78:19:a8:0d:82:b5:24:d8:59:6f:d4:eb:9f:73:
         c1:a4:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:12 2025 by rpki-client