Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37924c70-72ee-3dab-9166-ae2ed14f3e5a.roa
File:                     37924c70-72ee-3dab-9166-ae2ed14f3e5a.roa (raw, json)
Hash identifier:          dMMBLG+uAY/jJ7t1WpPtsElvOLzqYWF9BO6qrvYxdBc=
Subject key identifier:   84:52:0B:EB:B1:7A:51:67:1C:69:6B:BF:93:7B:3B:7D:A1:2B:A9:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24829CD50B54C977260940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37924c70-72ee-3dab-9166-ae2ed14f3e5a.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:82:9c:d5:0b:54:c9:77:26:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d89a300a-6957-4c6f-857e-94c329698fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:9d:ae:b6:05:86:9c:65:f1:a9:24:e4:18:
                    b5:64:19:18:96:1f:ae:f5:d3:78:57:bd:3f:ab:1b:
                    5b:05:7a:3e:19:1d:97:56:6a:00:c3:f9:ad:a9:df:
                    c4:03:74:9e:ae:91:60:2d:d6:d0:d7:18:7d:7b:8a:
                    fa:5d:b4:8f:17:ae:80:7e:69:52:f7:58:78:3d:a0:
                    89:f1:e1:b8:e9:bc:b0:4b:d3:0c:22:3c:2c:0e:42:
                    67:5e:fe:ee:3a:d6:b9:4e:a2:b3:3c:f6:e3:57:58:
                    2a:99:12:19:0b:c8:48:b4:d8:5a:e7:4a:a5:69:1c:
                    6e:bc:76:91:6c:06:4f:ac:05:82:0c:76:29:fc:25:
                    e9:c9:7d:7c:63:e2:88:e7:b8:58:8d:bc:50:16:1f:
                    1f:33:9a:8e:e5:87:cd:fc:1a:23:77:53:a3:41:ba:
                    13:55:85:10:e7:b4:b9:bd:1e:c7:d0:8d:01:db:8a:
                    7f:ff:03:79:78:ef:10:7b:27:b7:c8:dc:53:c1:7c:
                    c8:65:82:05:61:d5:cd:7b:02:2a:23:09:4a:96:dd:
                    36:93:cc:6f:df:c3:9b:81:b8:b6:2a:20:ee:45:61:
                    04:c7:11:ca:f0:55:55:c5:13:23:8a:15:60:67:8d:
                    4c:ae:60:bf:cb:c4:3f:25:3d:5e:93:18:39:a7:9d:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:0B:EB:B1:7A:51:67:1C:69:6B:BF:93:7B:3B:7D:A1:2B:A9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37924c70-72ee-3dab-9166-ae2ed14f3e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:81:83:b0:bd:6b:a1:cb:56:fe:26:2f:56:4e:f5:af:cc:
         1a:42:70:09:65:fa:6e:3a:db:2b:d8:44:5f:a3:40:a9:be:e5:
         73:fb:d8:2a:aa:1b:89:7c:de:4d:a1:44:3e:53:e4:aa:3f:e8:
         72:25:fa:bb:03:f2:62:3f:b1:6b:d1:40:1e:87:d1:67:f7:a9:
         65:39:17:9f:8c:0d:12:53:0d:22:0b:e5:35:da:ae:ab:50:9a:
         76:cc:8e:77:3e:c8:a2:bf:b2:ce:2e:fb:a9:fc:10:41:a7:c8:
         f6:ef:0f:e4:80:42:85:a7:62:6a:8a:cb:9b:b7:74:58:b3:66:
         c3:4f:26:ab:73:b0:ee:bb:cc:2a:7e:7d:78:32:e5:3c:fc:9f:
         77:de:8d:5c:5f:2d:f3:12:95:fc:b1:77:b8:ee:18:62:00:ad:
         90:32:a0:a9:8e:85:68:20:df:bd:e3:96:80:5c:60:d6:8b:a0:
         04:20:4f:03:73:a3:c1:52:4d:0e:69:10:e6:08:91:7c:07:d9:
         06:3a:8b:19:06:18:67:fb:ab:ab:26:52:cf:24:f1:c0:cf:06:
         aa:d2:18:ce:b9:dc:dd:24:29:f8:94:be:fc:3e:f9:eb:73:be:
         c2:e5:52:78:8c:84:64:d8:6f:eb:b8:a5:7b:7e:ea:a2:81:1f:
         8e:fd:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:00:01 2025 by rpki-client