Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
File:                     369e72e6-5397-340f-ab24-ce450e1cf697.roa (raw, json)
Hash identifier:          dLecMCsM+fi0TB51fp6V8sCjqXNpZ32J3MD+eVQcVBk=
Subject key identifier:   3D:71:C1:E5:FA:77:42:CB:9E:1C:F9:76:6E:62:8E:0D:7B:5B:F7:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C248507E74730B1218E0B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:d040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:85:07:e7:47:30:b1:21:8e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=abc735e6-be2f-4dfb-9c48-7fae26126097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:71:cb:6e:11:84:e9:a7:1d:35:db:f1:69:
                    74:1d:40:7c:84:57:a9:d1:4d:65:0d:1a:c0:f5:60:
                    b5:57:0c:29:e0:20:33:95:89:70:16:42:aa:87:c4:
                    a3:6b:f0:cb:31:1d:72:7b:71:6e:82:89:2e:0e:7d:
                    4a:3a:5d:4f:b6:97:52:32:64:bb:6b:fb:54:ef:b2:
                    65:57:22:7b:7a:2c:2d:30:0f:e6:c9:b6:0a:67:ec:
                    c8:f0:04:b1:62:51:b9:2c:4d:00:f0:5a:88:7e:1b:
                    92:74:d4:90:f2:4b:f6:07:a8:3a:33:26:44:69:6b:
                    40:cf:aa:72:9a:f7:6d:19:f0:00:0b:8d:98:69:ba:
                    ab:7a:ee:bd:4a:9a:fc:0d:ac:35:db:c4:b4:cd:b2:
                    90:d8:ef:f0:03:b3:45:38:a3:23:ec:a5:74:08:e2:
                    47:92:83:c4:14:e7:c7:31:64:4e:fa:d4:ae:38:13:
                    ab:b3:ff:60:bb:70:24:41:0c:6f:2b:1c:b4:f8:bf:
                    bb:2d:ae:64:99:a8:71:41:1f:d6:76:6c:11:e4:e2:
                    f5:ae:d0:da:7c:3b:11:5d:11:a1:03:92:6c:98:37:
                    40:fb:3f:b4:8f:39:2c:0a:28:11:45:79:7f:32:dc:
                    a7:eb:3d:19:99:d2:27:4a:78:cb:e0:74:09:f3:ed:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:C1:E5:FA:77:42:CB:9E:1C:F9:76:6E:62:8E:0D:7B:5B:F7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:db:68:46:de:37:db:f5:5b:39:b4:44:7d:3e:c3:71:1f:c8:
         f0:b8:b1:8e:37:a0:7c:de:fa:48:ee:dc:3d:d1:27:2c:b1:87:
         53:d8:26:06:57:fe:13:4e:f7:74:e9:1e:18:64:f6:dd:d9:ba:
         0e:a1:61:8f:38:56:b3:b8:fc:2e:5b:2a:28:65:0f:2d:e3:06:
         ee:3d:b5:31:e7:f2:a9:f6:11:3f:24:97:f9:79:73:15:1a:93:
         69:e7:13:ef:29:91:97:45:8d:cc:4b:9e:a3:64:2a:22:5b:56:
         ec:39:9c:56:f6:20:dd:a3:89:6c:a6:97:cf:54:73:21:ce:cd:
         86:46:d5:46:4e:76:b7:53:a8:9f:24:58:9b:03:de:4f:d9:6d:
         4f:c4:b2:a9:83:a1:5d:84:1a:36:5d:7e:ed:55:4e:f3:6f:70:
         93:c8:ef:96:91:92:a8:2e:cd:05:91:75:6e:62:af:fb:c1:e3:
         ff:8b:76:39:d2:ed:86:c4:99:ba:ed:c4:49:c6:0e:e9:30:5c:
         5d:21:9c:92:b3:0e:38:4a:52:c7:96:90:0b:5f:26:2a:b2:da:
         37:70:8e:5a:cc:8e:16:a1:16:bb:4b:8a:f9:79:6f:4f:1d:01:
         fe:4a:ac:6c:8e:82:28:c9:17:e3:06:c2:8e:6d:f8:9e:40:b8:
         b1:2c:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:21:31 2025 by rpki-client