Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
File:                     4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa (raw, json)
Hash identifier:          zgeDKagcitaH5pSCXPvCFrMR3WXQUKHrCKx0mobCIjU=
Subject key identifier:   06:5C:B3:D1:F2:EA:46:E4:E1:77:D1:80:1C:D0:77:AB:10:76:8A:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAC5535D6077C8153DC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1015:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ac:55:35:d6:07:7c:81:53:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=6829d0f7-8deb-416e-bb1f-7667617e5b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:09:29:d6:f1:6c:8e:40:83:c1:b4:aa:16:
                    67:e4:28:a6:61:22:3a:35:e7:36:c6:99:4f:63:d9:
                    72:58:7c:56:14:dc:f5:66:41:cd:ff:4c:0a:d2:5d:
                    6f:60:44:b1:c5:2f:d7:51:96:ee:80:5d:f6:04:12:
                    ce:b4:9f:bf:8f:d5:62:e6:9e:3f:d9:ee:d8:fc:21:
                    75:8f:c7:87:97:4a:c1:92:00:5b:94:f6:86:db:4a:
                    5e:e1:25:95:6f:3a:84:fb:a9:36:23:9a:db:d8:f4:
                    9f:c5:24:41:a0:e0:9c:24:b8:3a:25:a0:0d:7f:80:
                    12:1a:9a:e7:9a:6c:23:30:81:84:49:3a:28:3a:24:
                    71:0c:08:a3:24:3a:28:21:fe:36:e3:b2:de:a7:f8:
                    2f:b2:86:35:85:ac:2d:81:15:d7:ec:23:54:55:cb:
                    8a:37:5a:f6:37:37:2a:45:41:75:9d:50:78:44:97:
                    42:cc:b5:4f:3e:8b:c8:8f:62:ed:77:c9:7e:b9:7a:
                    ca:29:33:64:d2:9f:85:02:83:16:99:21:75:c0:66:
                    ee:3d:cf:c0:be:97:46:74:8f:8e:8f:d4:e7:b2:4a:
                    d4:0e:f9:e8:09:ad:e1:bc:bf:66:bb:ea:71:8c:14:
                    fe:41:1d:fe:35:d5:b7:51:4b:c3:53:00:d7:c8:98:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:B3:D1:F2:EA:46:E4:E1:77:D1:80:1C:D0:77:AB:10:76:8A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:41:49:30:db:d3:61:a2:3f:a2:e6:2b:a1:a5:51:b4:6b:
         38:da:d2:6a:12:51:68:28:95:77:66:d7:a3:1c:ce:28:48:2a:
         14:aa:c8:51:eb:2f:b4:9a:8f:31:30:3d:d5:92:b4:89:73:58:
         c0:57:a0:3a:34:8c:ac:d4:ff:81:87:8b:d8:e0:03:a2:4a:6d:
         00:02:b7:98:a5:24:44:86:d5:4d:19:69:53:fa:22:23:60:b5:
         b0:64:14:1d:ec:d1:dc:3f:eb:2e:bd:9f:fb:17:82:2c:3c:c5:
         03:75:b0:e5:2c:57:ab:fa:ee:99:23:50:31:05:b6:13:d6:cf:
         5b:90:07:8f:45:30:55:63:9f:2d:fc:b0:27:cc:0a:17:ce:bd:
         44:32:11:c6:52:21:bd:1e:b7:ed:22:db:46:4a:37:79:b8:c8:
         b4:69:df:7d:26:90:41:2e:c8:8c:01:99:4e:30:85:60:cc:8d:
         60:5c:cf:c8:54:d0:03:e3:e9:39:94:98:af:e9:d2:10:e5:3b:
         3f:fc:4c:94:18:5d:69:99:f6:13:21:59:9d:c3:28:3a:e3:42:
         28:5c:bb:61:c2:91:ee:00:5c:ba:65:00:28:c2:47:0f:eb:ba:
         80:07:bf:03:64:bc:f4:3d:1f:6b:5e:88:62:6e:04:6c:04:dc:
         46:06:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:57:25 2025 by rpki-client