Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
File:                     47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa (raw, json)
Hash identifier:          1BKVaIpPwQ8ztGW93utA+wHEf+VCE+IOj+kXlng3N88=
Subject key identifier:   4C:AA:04:2E:EE:D8:A6:4C:0F:B0:A1:62:11:5F:DA:C7:5B:A9:7B:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAF99AE3AA3DC47D0D000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:b150::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:af:99:ae:3a:a3:dc:47:d0:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=7b04c35d-76f1-4c66-a066-2d770a64f4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:68:ee:53:a5:1b:d7:4d:0b:a1:c3:df:68:
                    09:42:4c:fb:82:67:69:fd:c5:02:30:f2:01:8f:ea:
                    d0:35:f9:60:79:31:b1:91:cb:04:07:ec:65:70:2c:
                    36:e9:bc:5f:aa:cc:46:e6:a8:d1:88:5d:f2:5d:ec:
                    37:f7:94:65:e3:df:e4:1a:0c:f3:8d:5d:d8:4e:c1:
                    f9:eb:d0:24:42:23:28:e6:51:fa:84:cd:a1:e9:fd:
                    1e:ed:13:45:16:1f:04:93:23:d3:e5:cd:7e:12:3c:
                    9c:e8:7c:15:f0:e2:88:87:6d:5e:a5:98:d0:4b:af:
                    0d:1e:27:a3:d5:c2:41:1e:48:7f:92:0a:5e:96:eb:
                    00:96:d9:89:48:76:38:60:43:f8:d7:47:12:3a:47:
                    be:e2:db:85:f9:ee:7f:46:f6:d9:e9:72:36:9e:5b:
                    e6:b1:8e:ef:67:8b:c5:71:d5:b4:2c:f0:e1:dd:d1:
                    93:69:2e:79:ad:38:39:f5:39:fc:72:5e:7e:b3:1f:
                    a0:9b:0c:a6:0b:e9:fb:85:8a:5d:74:25:15:e4:f2:
                    f5:57:67:bb:4e:44:3c:60:bd:dd:59:5f:c8:7a:41:
                    b5:51:b4:f7:97:38:1b:6c:ec:2d:b0:27:83:aa:58:
                    86:7c:35:a4:c7:74:8a:91:3e:33:87:b0:45:7a:f5:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AA:04:2E:EE:D8:A6:4C:0F:B0:A1:62:11:5F:DA:C7:5B:A9:7B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b150::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:db:92:a5:53:27:a0:a6:7e:49:51:7a:e1:52:c2:38:69:31:
         0d:30:3d:01:9b:d9:c4:62:e3:f8:50:f0:99:fe:2b:22:9a:cd:
         e8:bf:ac:45:81:32:2a:09:fa:f0:82:eb:c1:b0:d4:2f:85:df:
         de:f0:d9:65:4f:fd:e5:04:15:a7:8a:01:0f:28:4f:38:b5:df:
         db:39:ed:5b:77:26:b4:33:7f:c8:82:73:ac:7e:cb:b3:ee:6d:
         d5:27:27:f3:15:da:dd:ef:0e:9d:48:1d:7f:3e:1d:1b:5d:00:
         37:12:b6:14:86:9f:a7:84:8b:b0:25:3b:06:7a:51:07:e4:e1:
         d7:7e:9f:c9:0f:2a:72:67:6e:11:28:3e:fa:d0:d6:ca:75:c9:
         3d:06:2a:87:fd:1c:91:26:5e:9c:cc:68:9a:d0:99:a1:13:ba:
         fa:43:10:45:7a:e5:16:0c:5c:4c:fe:67:d3:6b:67:6b:5f:ee:
         a3:ed:9b:f7:66:15:2c:e1:57:33:46:fe:34:c4:26:e8:0f:0b:
         ae:cb:0c:d1:14:d8:17:0e:33:bc:d9:48:58:e4:bc:1f:ff:e6:
         a0:84:a3:df:ee:57:21:ba:8f:5a:ba:07:ab:a1:1b:23:8a:e1:
         97:bb:c5:e6:61:92:20:c9:d2:a0:04:d0:28:f2:d4:33:6e:0e:
         b1:50:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:22:08 2025 by rpki-client