Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748c267a-ff79-3dc2-82c6-4401094ae531.roa
File:                     748c267a-ff79-3dc2-82c6-4401094ae531.roa (raw, json)
Hash identifier:          NfPoUB1/j2KaGz09SM98h2lGprK5W+9cW8rLml4eNro=
Subject key identifier:   03:C3:BA:E2:F2:45:47:71:18:E6:AC:18:1A:94:84:89:32:89:D2:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA2685E63F0A610C2DF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748c267a-ff79-3dc2-82c6-4401094ae531.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1014:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a2:68:5e:63:f0:a6:10:c2:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=bb23dbca-34e6-4e67-81ae-5aa0d58ddc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:dc:1b:55:83:a4:af:8c:e0:1c:ef:21:37:
                    74:5e:8f:53:a7:97:41:83:10:04:e0:69:ae:61:c7:
                    63:6f:75:6f:58:e6:e8:f6:d1:17:92:84:24:34:3f:
                    01:df:4e:28:0b:14:b5:39:21:c6:60:0b:18:ad:a2:
                    72:2d:58:4c:ff:fa:69:34:e9:64:06:79:96:a4:1b:
                    76:21:50:19:45:75:e0:77:b8:3a:dd:2e:5e:1c:ea:
                    bf:73:65:1e:1a:12:56:db:95:f7:df:c0:b4:69:4b:
                    89:0e:75:ca:ef:40:f8:f6:af:31:9d:fb:ec:ce:2e:
                    77:9b:67:53:71:4e:7e:0d:9c:cb:e2:0c:46:14:60:
                    87:c5:5d:e5:c7:a7:91:d7:76:b4:dd:7f:d1:79:d0:
                    55:1d:7a:a7:26:24:7e:45:13:6a:40:3d:cd:df:a1:
                    49:06:8a:08:8f:ab:f1:f5:5b:8e:03:64:0e:02:4c:
                    f1:4a:b4:a5:40:ad:42:f3:31:92:77:00:dc:21:0c:
                    1f:76:a1:20:18:89:bd:33:44:cf:72:5f:20:47:6f:
                    13:53:e2:49:34:26:d7:a1:48:17:eb:ae:36:8c:f8:
                    b6:0b:a3:4f:65:3f:ff:47:ad:a5:70:56:e0:1b:82:
                    7a:9a:73:d9:48:a6:51:71:0e:03:a0:3d:cb:01:25:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:BA:E2:F2:45:47:71:18:E6:AC:18:1A:94:84:89:32:89:D2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748c267a-ff79-3dc2-82c6-4401094ae531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:0a:74:c5:3c:9b:e7:70:f3:b4:c7:bb:dc:9c:fc:15:7c:32:
         53:9f:65:44:6b:d9:07:2c:4f:4d:bd:cc:cf:88:e9:6b:35:dd:
         42:ba:bb:7b:69:0f:81:64:de:58:d5:15:d4:4a:4d:d3:f2:82:
         79:9e:4a:a1:66:5b:2e:fc:f9:e9:89:6b:f0:a5:2e:e4:9d:6d:
         98:51:5d:1b:72:0a:60:43:51:08:16:1c:57:ab:de:53:f5:b5:
         a9:9c:a0:d1:6a:6f:78:5e:10:15:de:8d:43:e1:e7:54:30:89:
         cd:0c:a8:70:3c:8d:84:64:f0:d4:72:b6:c4:f0:44:38:9e:1a:
         ee:52:8b:3a:b2:6d:0f:f3:dd:a7:55:07:dc:65:e6:c8:88:d5:
         c7:02:7d:53:50:f0:d6:63:fa:66:69:f8:73:e2:1d:58:0a:ec:
         49:ea:ee:a7:c2:6c:05:44:ed:0d:72:e5:4d:a9:b5:9e:00:fc:
         bd:07:55:20:14:74:18:11:96:c8:b1:aa:d3:2f:c0:65:97:87:
         fc:84:1a:5f:93:b9:69:51:e8:b1:59:f0:78:b5:39:1f:a2:9c:
         99:c8:2e:ab:13:33:ed:6a:af:32:a0:43:07:69:04:73:24:c5:
         69:63:c6:14:d5:07:82:b3:7b:9a:89:55:1c:71:24:3b:cf:35:
         ab:70:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:19:15 2025 by rpki-client