Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac7d7a9-8c5c-35d5-b3fe-9f598ae2db10.roa
File:                     4ac7d7a9-8c5c-35d5-b3fe-9f598ae2db10.roa (raw, json)
Hash identifier:          k+ByC+TpMAswdBIf8sJUVTmiu+//ELX1XhMWRrK1Bcc=
Subject key identifier:   17:55:97:B6:12:E6:38:B0:6C:E3:76:8A:5A:20:52:6B:BC:42:2F:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A023FC8E80B6E02A6F103EC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac7d7a9-8c5c-35d5-b3fe-9f598ae2db10.roa
Signing time:             Thu 29 May 2025 01:00:50 +0000
ROA not before:           Thu 29 May 2025 01:00:50 +0000
ROA not after:            Wed 27 Aug 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1016:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:02:3f:c8:e8:0b:6e:02:a6:f1:03:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 29 01:00:50 2025 GMT
            Not After : Aug 27 01:00:50 2025 GMT
        Subject: CN=961a78f0-e414-4c5e-90cc-db57ecd906b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:1d:f7:fd:0a:92:4f:db:d2:3e:ea:0f:55:
                    3d:e4:e5:f9:2e:1a:9f:b4:c5:40:4d:d7:32:01:fa:
                    5d:cd:09:b4:4e:ef:dc:95:74:c2:58:51:2d:63:81:
                    a1:89:9c:c1:f8:d5:84:c0:56:2a:1c:21:a5:5f:d0:
                    ab:5a:31:68:81:3b:6d:9e:f6:f7:65:e1:fd:7e:a4:
                    73:b2:7a:7e:bb:d7:63:d7:db:15:f9:f7:0c:66:3a:
                    ad:15:42:b0:45:8a:27:5b:95:92:7b:dd:b0:2f:2c:
                    79:a5:df:0e:04:3f:24:54:58:23:50:34:cc:1f:24:
                    66:6f:53:73:9e:68:65:df:78:b0:45:b4:37:be:51:
                    c4:a9:47:eb:a1:2c:04:a4:68:89:29:3a:df:3e:af:
                    7a:a2:19:6f:30:c1:bd:12:c9:88:51:63:5c:fc:2c:
                    ba:3b:53:91:ca:fd:b5:08:b5:45:71:ac:af:e6:84:
                    83:e4:4b:f5:a6:d8:f3:c4:a9:e7:cd:fa:1f:3d:67:
                    da:2f:f9:f9:29:6f:28:49:8c:ad:52:f6:c4:71:90:
                    7c:16:35:1b:d4:61:81:7a:5a:e4:4b:4b:28:59:83:
                    22:85:9b:de:9b:ca:f3:5a:2b:5f:75:7d:16:3d:7d:
                    03:cb:44:79:ca:cd:b9:e2:ea:11:e5:e3:03:67:48:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:97:B6:12:E6:38:B0:6C:E3:76:8A:5A:20:52:6B:BC:42:2F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ac7d7a9-8c5c-35d5-b3fe-9f598ae2db10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:65:7b:d4:d2:ff:b8:14:50:bb:01:76:92:24:86:7c:09:4e:
         d3:fe:4e:2a:f7:41:67:87:21:8c:54:7c:4c:3c:0b:11:a2:bf:
         78:4c:a0:37:c9:43:5d:1e:bc:48:5d:65:c2:94:39:70:61:58:
         9e:5e:ff:b7:78:3d:f0:45:64:57:2a:41:82:be:47:f4:e9:d1:
         4a:16:82:0b:97:3e:da:45:51:ae:df:a4:33:95:fd:d3:b7:a1:
         82:df:b6:81:93:67:92:b3:f3:48:d5:ed:f6:6e:0b:27:00:a6:
         61:89:ae:9c:72:8b:05:d3:b6:dd:d7:93:a5:29:77:34:7e:6f:
         2d:42:96:ca:53:34:2a:6f:ef:02:95:a8:e4:1d:51:87:27:5a:
         4b:63:4c:df:3a:b9:60:5d:c6:0f:cc:bd:62:70:3c:59:78:27:
         86:b2:eb:c5:80:f2:fb:77:13:e4:fc:08:d0:cb:d1:ba:fd:02:
         85:42:94:c1:1f:fb:cc:7d:47:72:13:06:e9:27:5e:4b:4b:56:
         33:6a:6c:a9:f8:c6:df:3b:13:02:0e:5d:89:f4:be:96:40:e3:
         ec:43:d6:79:1b:0c:bc:af:21:53:b9:22:70:59:3f:37:79:fd:
         7b:62:6a:c9:00:58:71:39:9d:d5:b8:46:30:e9:2e:d4:e6:6a:
         6a:42:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:22:39 2025 by rpki-client