Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa
File:                     5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa (raw, json)
Hash identifier:          MASCJo8+uoIQyLsUNJ1ldy6TIHkjugujUClB74BdNdQ=
Subject key identifier:   70:12:6A:E6:FF:3A:D1:17:96:76:7B:CA:A1:52:6E:B6:E2:04:DD:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAC31F911D0D51FBC4B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1015:b220::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ac:31:f9:11:d0:d5:1f:bc:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=54efb6f9-f0bf-43b6-9e26-e99bd3170516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:7a:9c:9d:a3:ed:e8:60:4f:9a:03:5c:9c:
                    ca:f8:44:cb:f5:df:62:51:84:77:39:34:f5:21:dc:
                    46:cd:8d:72:44:99:35:63:4a:09:48:f3:ad:94:ad:
                    ef:4c:27:eb:2b:c0:bb:08:f8:cd:08:7c:13:a1:e5:
                    fc:73:a8:4c:96:e5:8b:69:9f:c3:1b:31:ce:91:4b:
                    f0:35:a5:35:21:b2:fb:0b:14:87:f9:a3:04:d7:39:
                    74:e7:c1:82:04:97:2d:ca:32:64:33:cc:d8:43:0e:
                    c6:38:0f:aa:49:68:9c:cb:a5:b5:87:0d:9a:ba:78:
                    b9:a1:86:8c:ba:73:9b:88:d4:bb:ed:36:13:71:5a:
                    6c:30:45:bd:54:8f:7e:e3:e2:57:03:15:0d:9d:61:
                    e4:09:2b:72:a2:fe:dd:ac:18:8e:98:37:9a:ce:c8:
                    c6:1b:fd:2e:53:c3:9b:20:be:0b:b4:ed:a6:e7:ea:
                    f3:9a:89:a8:f3:a0:2f:c5:d3:9c:ac:13:4a:58:cd:
                    44:f8:63:61:02:3d:12:71:55:52:0f:c2:08:b7:96:
                    7a:d6:aa:08:da:1e:97:d7:4b:21:75:6e:49:9e:77:
                    18:61:6f:45:a3:cd:1c:1c:10:9f:ac:93:e6:9a:c1:
                    cb:35:36:57:12:d7:7d:5f:07:f3:9b:54:ba:d3:23:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:6A:E6:FF:3A:D1:17:96:76:7B:CA:A1:52:6E:B6:E2:04:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b1f40b5-ecfa-3b3e-a52a-5cb8b2220166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b220::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:87:79:27:5f:63:87:50:a7:21:80:fa:8f:c0:e9:05:ea:
         b8:a9:8d:90:38:c7:c1:ab:be:87:2a:ff:5c:c2:72:8e:db:cd:
         e6:54:a4:1a:f9:db:d4:6c:f0:65:0a:7a:5b:2b:51:c3:1e:7c:
         ad:13:21:fa:2c:4d:eb:d4:e0:41:05:3d:23:15:3b:03:70:69:
         73:89:6b:7c:b5:b9:18:ca:42:c3:e4:32:6c:1c:34:96:b6:1c:
         8f:a0:fc:32:5f:02:50:28:bb:37:4e:93:a4:6e:43:41:bf:25:
         be:97:eb:93:01:0c:9d:21:60:e3:78:1d:7d:f7:bb:4e:af:76:
         a3:12:71:b5:2d:63:92:c2:89:0c:b0:d9:54:f2:2b:43:27:9a:
         74:89:54:5f:e2:0d:b3:79:a3:03:b3:9c:6c:b4:21:91:91:19:
         42:68:4a:5a:3f:9d:86:1e:f6:58:0f:28:27:79:93:b7:79:06:
         20:51:24:03:59:c1:58:c0:93:38:5d:15:66:83:9f:b9:c9:42:
         e8:b5:2c:7d:55:a2:05:7c:d4:7a:ff:11:db:c2:69:bb:63:99:
         9a:ce:9d:99:1e:85:17:b3:e0:4d:55:56:a4:f7:c5:2e:a6:a2:
         64:63:8b:dc:11:a4:6b:36:5e:00:d3:ad:a7:bf:f4:5b:85:30:
         bf:69:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:06 2025 by rpki-client