Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af92273-5341-3180-b789-446a6f916063.roa
File:                     4af92273-5341-3180-b789-446a6f916063.roa (raw, json)
Hash identifier:          Gnr3xI410xB0Y5tIAlK4ej/K2rycNCiMsUziNfWhKC0=
Subject key identifier:   43:3E:E1:7F:52:36:6A:BE:FF:0E:F1:92:3F:1F:3C:19:AE:29:8C:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C41B837BE5A547DB09BDDE20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af92273-5341-3180-b789-446a6f916063.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     6167
IP address blocks:        2600:100e:a021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:83:7b:e5:a5:47:db:09:bd:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=2303358d-643b-428f-b480-7799730b4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:af:c4:c0:82:f7:42:3f:6f:58:ba:52:b9:
                    bd:8b:8f:c8:96:bb:96:24:4f:d7:9b:d7:78:22:61:
                    b6:12:80:04:6c:6a:cf:83:f3:61:04:42:f8:8c:35:
                    e6:ff:a6:c1:d0:b3:4b:35:0d:98:49:54:09:c7:44:
                    b8:94:0b:d4:24:3c:d0:08:e6:d6:cb:1e:eb:71:69:
                    f0:ab:2f:30:fc:6e:6c:c9:21:27:b9:f7:5c:77:c4:
                    9a:35:14:e7:fd:8b:52:02:68:ab:8e:6b:b9:f7:fb:
                    7e:88:ae:e1:91:6a:c4:a9:65:61:73:6c:8c:ce:a1:
                    2d:90:1f:1c:77:70:80:e1:ff:f8:a0:b6:78:8d:3d:
                    45:e7:ee:89:d5:9e:31:07:22:be:50:46:c7:06:71:
                    5d:04:22:95:01:ad:8d:c7:38:5e:0e:24:b2:cb:7d:
                    91:5c:47:25:34:f3:b9:0b:da:01:3a:cf:13:4a:30:
                    ed:99:96:a4:e2:ab:7b:33:87:c0:b9:62:e4:dc:e6:
                    11:0d:d8:7c:f4:3e:05:d6:fa:31:76:fe:7a:b6:18:
                    6e:8c:e5:ab:32:e5:3e:b2:97:be:96:2b:e2:7c:a2:
                    b1:9b:9b:7d:c8:e5:eb:fb:ed:83:84:e1:df:ba:e9:
                    b7:d0:d4:86:46:60:31:7f:b0:04:cf:2a:95:49:e7:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:E1:7F:52:36:6A:BE:FF:0E:F1:92:3F:1F:3C:19:AE:29:8C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af92273-5341-3180-b789-446a6f916063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:9b:75:92:f2:06:3a:03:95:57:73:00:18:e6:0d:db:7f:03:
         b5:b8:36:bf:81:d6:28:08:6e:6e:69:86:9e:05:a4:4f:fb:8d:
         78:72:e2:2f:15:be:6a:9e:36:3f:5e:8d:d7:ef:c7:46:4d:f1:
         20:2e:9b:cf:bc:6f:9a:5d:de:3c:80:99:71:7a:b4:00:c0:c9:
         e7:be:19:41:6d:74:8b:6a:e3:66:fd:8d:a6:5a:a1:fa:55:51:
         57:a7:b5:f0:fd:a8:c7:7a:dd:1e:26:26:b0:ac:c6:7b:18:0a:
         41:1e:db:6c:61:ee:f9:47:ae:ff:f7:f9:46:26:85:25:c0:9b:
         9d:45:b2:80:78:ec:a8:b8:3d:30:6f:54:10:1a:87:8c:29:e0:
         dc:02:ce:38:6f:e1:d4:88:08:79:21:17:99:cb:92:09:99:b1:
         26:c2:7c:d8:6d:00:33:57:da:41:9b:0b:51:c2:c5:bb:dd:25:
         dc:84:4b:1b:e9:2f:03:64:fc:5c:85:8a:cd:1d:ce:5b:e0:2b:
         0c:83:00:c6:6a:fc:50:47:0b:dc:da:cc:38:90:80:c3:7a:8a:
         18:09:8d:92:cf:bb:9b:93:32:c4:82:34:9f:c4:d0:8d:41:cb:
         7e:43:6c:cd:db:b1:7d:0c:ff:e3:ef:ae:a7:5c:23:9c:cb:d9:
         22:2a:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:53 2025 by rpki-client