Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50c3946a-840a-3967-bbe6-ea1b5526f871.roa
File:                     50c3946a-840a-3967-bbe6-ea1b5526f871.roa (raw, json)
Hash identifier:          PJ8oEcO3ZX1BOWAZsPwKewWMGVB5XnccbUf8I6yWi9U=
Subject key identifier:   01:F5:9C:A3:E6:10:E1:1A:34:F7:3E:B8:0F:D6:A5:6B:3F:B3:80:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA7FCCBEA26448BC8EF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50c3946a-840a-3967-bbe6-ea1b5526f871.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a7:fc:cb:ea:26:44:8b:c8:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=44c70f37-40b2-444b-a88f-559323fb2d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:7a:94:ff:74:16:65:7a:87:20:e6:28:04:
                    42:fa:8a:83:c0:01:0b:28:7f:b4:65:9a:28:2a:64:
                    98:54:a1:f4:30:17:f2:d5:41:ff:ff:61:73:bf:a2:
                    93:26:1a:1f:6d:a3:40:1a:da:e2:a4:65:b0:76:0b:
                    0e:b7:ee:ca:7d:6f:2e:d4:43:f2:bb:d4:f5:93:6c:
                    70:d5:b9:49:98:d1:05:09:be:08:3f:34:59:93:1e:
                    28:3b:49:02:84:63:85:9b:67:de:5c:cc:76:37:6e:
                    7a:6d:e7:13:09:c8:a7:98:61:9f:92:3e:2c:59:82:
                    ad:b2:69:19:a9:c8:10:c4:f5:a0:3b:28:cb:70:87:
                    cb:66:ac:69:f2:22:00:f5:bc:ce:a2:d0:21:15:28:
                    f6:e2:a5:3a:b5:37:39:81:54:e2:a8:e0:94:1a:fb:
                    88:d5:6f:60:bc:b9:48:9f:09:d3:4f:56:64:8a:97:
                    bb:3c:be:a3:85:7d:0f:ce:f8:b5:a1:5c:65:61:68:
                    7f:34:03:7d:85:c3:0e:89:51:31:5f:b0:05:4e:38:
                    76:3b:0e:dd:62:61:42:67:1f:6f:42:f9:6a:22:61:
                    13:54:bc:41:ee:c4:3b:29:aa:d0:df:b7:5c:72:70:
                    17:1e:52:f3:4f:d0:68:5a:02:84:39:4d:6d:c3:09:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F5:9C:A3:E6:10:E1:1A:34:F7:3E:B8:0F:D6:A5:6B:3F:B3:80:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50c3946a-840a-3967-bbe6-ea1b5526f871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:7a:34:5a:a2:e6:84:85:bb:03:c3:1d:15:c6:54:75:ec:
         3e:d5:1a:b5:7d:b1:28:0f:8e:4c:6d:f5:6d:93:3f:43:b2:1b:
         dc:f5:67:1f:f8:e9:08:ad:c2:8b:49:eb:42:27:87:f5:ef:99:
         fc:c6:30:ee:72:dd:08:98:77:32:40:82:a4:4f:32:5d:83:d3:
         de:ad:9a:53:a0:b0:36:6a:2c:a5:3e:b2:c4:72:14:5e:1c:15:
         5f:48:48:94:d0:72:df:43:40:6b:a8:c5:8e:59:c0:15:c0:fc:
         b6:dd:8f:e0:58:7a:42:ca:c6:1d:da:c2:c5:5e:c9:ac:44:f9:
         89:76:37:07:c6:c8:ff:25:b9:af:70:a7:f7:1d:ea:79:3a:c2:
         f1:8d:0c:f6:a9:b5:fd:ad:cf:0b:41:92:12:39:b6:e3:3a:d6:
         45:25:5a:08:24:c3:af:8c:96:29:e0:20:51:ee:64:4f:61:7c:
         1c:b9:4e:a2:ec:5c:7f:d0:33:da:49:77:b1:99:bd:a9:b5:ae:
         5d:4c:9b:dd:e6:b3:9b:cf:73:d6:a0:4d:69:68:91:7e:83:8b:
         e8:96:a3:26:03:18:69:5c:5c:55:c3:62:45:3d:97:22:30:3f:
         88:79:02:e1:1a:08:c7:96:31:6c:57:85:84:a3:cf:7a:af:d4:
         8d:24:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:54 2025 by rpki-client