Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa
File:                     60741251-697a-377e-9e10-726d95497412.roa (raw, json)
Hash identifier:          IipbaQE4prTy4y5JaZJd9Vdr4DFYOddv32qsjjWeNXE=
Subject key identifier:   E6:61:21:4B:71:94:73:BE:CC:65:01:95:68:42:28:D3:62:A7:85:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584900D778B94CB925A1A9FEA850
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa
Signing time:             Tue 25 Feb 2025 20:07:58 +0000
ROA not before:           Tue 25 Feb 2025 20:07:58 +0000
ROA not after:            Mon 26 May 2025 19:07:58 +0000
asID:                     6167
IP address blocks:        2600:1008:b230::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:d7:78:b9:4c:b9:25:a1:a9:fe:a8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 25 20:07:58 2025 GMT
            Not After : May 26 19:07:58 2025 GMT
        Subject: CN=8bca5800-b4c7-4e54-b563-13010deba82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c5:46:17:5b:b8:7f:04:f1:08:30:6b:c1:80:
                    5d:97:6b:f1:49:94:bb:1f:e6:c6:d1:c1:77:0d:a3:
                    71:53:9c:78:70:2c:fa:05:8a:f9:ba:31:5d:88:24:
                    07:db:6f:c3:57:58:34:a3:11:f6:a5:af:a6:ce:a0:
                    af:c3:e5:7c:e0:55:db:9d:b4:11:1b:ef:3b:f7:ff:
                    10:d3:b0:94:1e:26:56:89:2f:2a:7b:2e:6c:a5:40:
                    4e:38:50:7c:5d:90:27:9d:ea:09:08:d3:de:13:80:
                    f3:f5:2e:d6:e7:c5:39:fb:d5:66:45:e2:12:c1:e7:
                    d4:c8:f6:f1:a9:ed:2e:17:92:03:9d:66:c8:43:81:
                    da:20:fc:56:cf:a1:a6:7a:96:8d:a3:6b:3c:56:a2:
                    be:d8:0a:c4:c8:94:94:ec:3d:93:91:71:17:b4:23:
                    88:56:48:22:45:81:12:aa:e5:09:03:9e:9d:ff:15:
                    c2:26:08:db:d3:66:b5:05:16:84:6b:25:6f:70:cf:
                    01:03:e8:db:f9:9d:d2:32:8b:04:f8:d3:df:14:81:
                    a9:7f:1e:f5:0e:6d:32:f8:13:9e:d9:de:44:38:d5:
                    13:f8:32:51:51:2d:35:57:16:95:e0:96:43:67:a5:
                    c3:8d:0f:c1:65:a0:8a:c5:6a:aa:4e:f2:35:1f:06:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:21:4B:71:94:73:BE:CC:65:01:95:68:42:28:D3:62:A7:85:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b230::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:07:a6:39:af:7b:ca:d2:f1:cc:f5:c1:64:6b:4a:8c:29:
         23:fd:aa:25:6b:ad:51:23:4f:04:6e:99:a4:71:9f:af:4d:61:
         5e:9d:ff:90:d9:b7:71:0a:fe:48:cd:1e:d6:37:17:04:fb:15:
         0a:59:fc:52:1d:43:6c:e9:04:2f:b8:a8:4e:2f:64:23:00:05:
         1e:98:8a:d6:74:b8:30:d8:95:8d:8e:a2:1f:07:4c:01:15:c8:
         94:14:bd:b2:c4:3c:a9:07:d8:c2:81:c1:60:d3:11:d1:af:52:
         c1:5a:1f:09:7c:38:fd:f5:ca:2c:a6:3f:b5:74:a2:99:e7:f3:
         b4:bd:1c:83:7a:60:ae:83:ea:10:da:67:30:8f:0d:12:96:77:
         7e:37:93:65:57:28:3d:87:ca:10:95:90:e8:5f:8e:c6:44:a0:
         04:d9:7d:b7:68:dd:aa:f5:44:6d:c5:07:26:0b:53:73:a8:13:
         2e:1b:08:f4:18:8e:f7:bb:c2:62:71:34:c8:c3:91:b8:92:87:
         6a:c3:15:1a:2b:4e:9c:96:66:5d:1e:64:d2:22:c5:a0:48:8e:
         36:da:e5:9a:d9:71:a5:98:14:e6:04:95:c5:42:05:a7:85:2e:
         fc:f0:6e:d4:55:30:39:00:6d:56:35:38:18:c6:35:6b:90:db:
         ce:fe:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:57 2025 by rpki-client