Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e070c25-e11a-3108-afb2-656824d88eeb.roa
File:                     8e070c25-e11a-3108-afb2-656824d88eeb.roa (raw, json)
Hash identifier:          a/INQ/CNPHbAlHjcbWaoFd/vK7HSNVLfny06Mw7Maio=
Subject key identifier:   0A:D9:05:29:DC:2C:E7:24:77:B8:27:02:D8:7C:FD:F0:19:A4:77:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAC035A04D801F94D7900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e070c25-e11a-3108-afb2-656824d88eeb.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1015:b1e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ac:03:5a:04:d8:01:f9:4d:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=a9945128-edc5-4d35-b0f4-6bf86bf50163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:dd:97:7a:34:d7:a8:20:33:1b:60:83:99:
                    39:48:78:1c:31:b3:88:27:aa:1a:f5:b5:23:f5:6e:
                    ac:d3:ce:3f:a8:06:09:59:90:ba:7a:4e:52:5a:bc:
                    e6:40:0e:f0:ab:87:08:7a:7b:0c:e5:c2:f4:04:24:
                    5e:48:c7:d4:1d:4c:14:55:7d:3a:4f:33:a0:30:f6:
                    30:a9:ae:d3:d4:fb:41:6a:02:c5:3e:07:f5:4b:ba:
                    b9:95:33:ad:31:3c:cb:e3:68:0b:d3:0d:98:c7:7b:
                    25:02:80:15:b8:1b:00:9f:56:7c:5c:91:f6:d8:d1:
                    d1:67:9d:6a:03:10:48:3b:67:2e:ae:26:f8:67:a9:
                    4e:0d:e7:15:04:fb:47:c7:86:8c:34:11:09:01:cb:
                    07:19:2d:eb:8b:7b:63:93:23:4d:92:a3:e6:93:dd:
                    9a:0a:2e:0a:84:88:84:c9:02:3d:13:e3:b2:1d:58:
                    d3:c3:d0:a3:b4:4b:af:a8:8b:24:b3:61:ea:fd:09:
                    a0:f1:e7:e4:55:c6:ef:72:45:fa:c9:ed:0c:6c:06:
                    a7:cd:80:0d:6c:f4:2a:21:8d:4f:1b:50:3b:89:8d:
                    02:76:ad:90:35:b6:a8:96:85:b2:2a:09:e5:f4:32:
                    ff:4c:7d:d5:6e:b1:12:8c:b5:85:95:d7:70:f7:ec:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:05:29:DC:2C:E7:24:77:B8:27:02:D8:7C:FD:F0:19:A4:77:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e070c25-e11a-3108-afb2-656824d88eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b1e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:58:7a:f4:d0:99:e9:9e:a2:5f:77:d8:04:cd:4e:f9:81:c4:
         6a:42:c9:11:12:08:30:0f:e1:2b:ff:ca:b5:ec:a7:38:85:a3:
         57:86:6f:ad:28:9e:1a:fb:fc:a4:76:1a:24:92:2f:e2:21:ba:
         54:1d:73:e3:d3:8a:81:2d:bc:b2:46:23:9f:22:97:bd:5b:7a:
         10:9a:db:02:f8:f0:cd:06:7b:28:36:5f:26:ae:ba:45:27:94:
         f8:d4:c9:31:03:a9:07:e7:7f:44:c0:59:45:6b:08:37:5a:16:
         5d:a3:87:f5:4a:ba:76:5c:6d:7d:7e:24:58:bf:5e:07:a1:f7:
         b3:b3:c3:7b:99:41:fd:9a:9f:6e:85:8c:ab:72:28:44:af:f1:
         b7:69:73:f7:52:47:ec:a7:88:99:a3:18:13:b6:3f:0e:9d:b9:
         23:0b:de:e8:27:21:b3:76:c4:9a:08:cd:19:94:f4:5b:c4:d0:
         46:9b:4a:9d:04:7b:62:9d:d7:4f:7f:f5:1e:ac:3a:7b:7b:a3:
         6a:b0:fe:66:ac:13:49:7e:9b:f8:8b:9c:9b:d8:bf:9f:9b:30:
         7d:f6:e1:a1:91:b9:4b:7b:ca:56:5f:b3:48:13:77:ae:77:ba:
         2d:ca:d7:3f:3a:b2:f0:fd:70:fb:1f:47:42:fa:e3:e1:08:2b:
         db:a8:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:47 2025 by rpki-client