Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d360b93-502a-3706-894b-a92e237e7559.roa
File:                     5d360b93-502a-3706-894b-a92e237e7559.roa (raw, json)
Hash identifier:          ploxMgoSlqXi4m1uVSJvKHOpb5tOPtF7FkqwBYaWSEE=
Subject key identifier:   2D:75:DA:8F:B3:B0:86:F1:E0:0F:DD:B7:5F:E4:62:DD:6D:79:58:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9FBEF759A4DA4670C100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d360b93-502a-3706-894b-a92e237e7559.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1011:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9f:be:f7:59:a4:da:46:70:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=46f3b65f-0825-44d6-a541-e3152094b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:72:63:ad:7e:00:5b:b0:87:f5:c4:4a:9f:
                    79:da:e2:d1:2e:ae:14:da:80:cb:28:58:93:94:bd:
                    f8:04:b4:e3:30:db:98:6d:89:4d:85:af:aa:44:3c:
                    dc:cb:99:f3:9f:83:04:f4:90:4d:0c:d1:bb:55:63:
                    49:ec:89:8a:db:01:16:e0:18:5f:14:03:68:44:1c:
                    93:ff:dd:ca:d7:43:87:c5:cd:b6:97:ff:2a:27:fd:
                    1f:53:ab:67:15:7f:72:99:f9:b2:6c:65:e5:5a:9f:
                    26:20:03:29:7b:2d:c2:46:33:97:c9:b6:8d:c8:59:
                    da:49:16:13:71:c2:9c:f0:e2:b9:33:d3:a0:47:c3:
                    00:fa:ff:c4:4b:7a:be:74:d8:07:2c:d1:95:3d:f9:
                    9e:98:01:b4:ae:e0:03:51:43:f0:fa:21:1a:8e:30:
                    1e:b4:d2:05:59:41:ca:7b:de:a4:95:1a:46:2c:81:
                    a5:fb:44:6f:c0:19:69:6a:4a:6d:af:2e:c9:3f:09:
                    26:d0:12:f0:57:76:75:c6:ac:3f:3c:4b:55:b5:a5:
                    96:34:f4:59:91:23:50:86:a6:75:55:de:0c:fc:db:
                    fd:c2:84:53:b1:c2:de:7e:93:40:0d:92:11:4c:95:
                    4e:73:04:8f:5c:aa:95:45:2b:8b:1d:cb:be:a6:40:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:DA:8F:B3:B0:86:F1:E0:0F:DD:B7:5F:E4:62:DD:6D:79:58:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d360b93-502a-3706-894b-a92e237e7559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:40:eb:c7:ed:14:35:18:95:ac:10:a8:da:75:23:28:b4:
         3d:19:5c:4c:bb:ab:59:ce:a9:05:bd:3a:be:6a:bd:96:cd:13:
         65:8d:20:e5:5a:6b:1e:81:42:c2:c3:58:1a:e6:38:87:c2:88:
         e2:dd:9c:f3:7e:52:3f:11:3a:e0:c2:c5:41:ed:f1:14:e0:19:
         57:99:e3:01:fd:68:2a:70:b3:cb:aa:d7:a2:b3:52:2a:41:3a:
         71:7e:01:08:56:5c:83:7b:62:b6:c0:25:0b:dc:4d:47:72:c9:
         8e:49:ba:7d:68:0d:fa:df:80:57:6a:40:7d:22:26:41:04:88:
         6d:6f:88:4a:3f:08:1d:e6:9f:cd:5b:78:dd:2f:1b:f9:5d:e3:
         e3:ca:45:4a:9f:55:c0:12:a6:7d:00:06:09:ff:5e:3b:09:97:
         5c:12:07:b2:01:a6:98:f8:d5:73:2a:5e:55:ea:20:ea:fc:ea:
         e4:12:4c:92:ed:fc:c7:32:19:13:7f:97:5c:4f:32:83:b2:56:
         65:bf:63:98:99:0c:75:ac:51:a7:0f:76:a2:42:95:60:e8:e0:
         69:fe:72:b4:3a:fc:01:9f:a2:e9:a6:94:eb:8d:3a:2f:8b:48:
         52:be:d9:80:52:67:0e:c1:7f:05:64:b1:04:73:6c:62:0a:b7:
         aa:2b:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:06:38 2025 by rpki-client