Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6724d5f9-aba5-365a-8527-bcf78662bbb8.roa
File:                     6724d5f9-aba5-365a-8527-bcf78662bbb8.roa (raw, json)
Hash identifier:          kOuIhzUaeNr6k1Ow9UqjQOxMmt1TCJ+EMqyIq+v8cGU=
Subject key identifier:   83:83:50:34:8F:F6:EA:41:4D:B7:CE:7C:1F:31:52:7E:1D:21:C4:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400ECB4F9E7A81BB478B828
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6724d5f9-aba5-365a-8527-bcf78662bbb8.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100d:b0c4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:ec:b4:f9:e7:a8:1b:b4:78:b8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=507a66d2-087f-41ca-b10a-62d459bfc4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:36:9d:54:0b:da:97:1e:3f:d9:41:49:63:
                    e2:d5:67:33:00:42:9e:82:eb:ab:2b:60:db:fc:61:
                    71:07:0c:d3:6f:95:7e:a1:2c:72:6b:1d:d8:20:cc:
                    0f:11:59:42:d9:e2:80:b9:d6:5a:dd:9b:ac:62:d4:
                    11:32:3f:30:42:f4:7d:ea:45:d1:2d:ef:1c:73:18:
                    70:73:d4:9a:4c:87:33:0e:8c:da:fc:1e:99:93:f9:
                    1a:b0:71:ad:00:4e:51:ad:56:2c:e2:a2:0d:39:e1:
                    06:07:29:f0:62:f5:70:5b:67:e9:a9:9b:61:ad:cd:
                    27:b5:1d:70:a3:46:06:e7:37:51:d4:62:2e:cd:66:
                    db:76:92:9d:33:e0:2d:c0:c1:ff:42:fd:8b:b5:de:
                    b8:91:4e:80:b1:18:27:69:2c:78:68:d1:89:fe:71:
                    88:6c:c8:13:f9:77:a1:92:be:2a:ea:a9:72:55:e4:
                    f2:19:f2:03:c9:eb:c6:f1:10:25:9b:0f:ad:a7:c7:
                    5b:7d:8f:f5:da:66:58:82:a2:e8:a8:f5:26:f6:1c:
                    2f:e5:48:2d:22:e9:57:2a:87:7f:1c:77:30:e3:f2:
                    45:06:01:2f:72:f8:60:02:2d:27:d9:e7:18:8f:ee:
                    a4:e4:3c:1b:16:9f:72:6c:3d:2b:4d:0e:0c:27:a8:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:50:34:8F:F6:EA:41:4D:B7:CE:7C:1F:31:52:7E:1D:21:C4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6724d5f9-aba5-365a-8527-bcf78662bbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0c4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:53:df:bb:eb:7b:e6:e6:af:f2:97:fa:47:35:16:cd:66:5a:
         07:f6:89:72:af:dc:81:c5:ba:9a:72:90:39:9d:7c:3e:5f:17:
         19:68:cb:15:b6:d1:94:8d:99:f1:ae:48:d1:12:07:be:0b:a4:
         0f:56:31:c0:5f:59:db:5e:00:18:6b:f1:6f:c4:b7:a2:9f:34:
         6e:2e:89:ba:48:17:7b:a7:53:e1:99:89:51:ea:d5:fe:5e:9e:
         47:44:fc:5a:0c:90:ac:af:78:25:e2:31:48:92:09:b6:3d:cc:
         96:48:03:5b:de:b6:5d:9a:ca:ef:2f:b6:2d:72:dc:2e:a3:29:
         ac:da:51:fe:3c:07:78:a5:ef:c6:88:05:94:47:29:78:9d:13:
         81:9e:f7:e3:79:4c:0b:2f:f7:51:dc:c3:8b:eb:0e:05:cd:e1:
         c8:dd:af:3c:25:32:aa:50:ce:b9:0d:f3:d3:56:1f:8f:df:97:
         68:6a:ad:a3:7e:e5:74:f8:af:d4:d0:7c:4c:11:c7:c6:d8:12:
         be:1c:1f:ea:0b:dc:5e:63:95:5b:99:31:a2:b3:3f:17:4c:96:
         30:fd:26:5c:59:52:8a:9a:52:8f:95:37:9f:f4:21:e7:61:50:
         c4:40:73:f5:f2:ad:6b:32:44:ad:64:6d:8f:c3:7b:8f:c9:85:
         c6:dc:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:42:34 2025 by rpki-client