Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96250d73-6eea-3863-a204-a6b7b108ef49.roa
File:                     96250d73-6eea-3863-a204-a6b7b108ef49.roa (raw, json)
Hash identifier:          7di7A4HMD3USwonuf3GWn++QZxSSyn6s9SCjSXoPlt4=
Subject key identifier:   ED:3C:0C:06:A6:6B:29:EF:5E:9D:59:2B:27:6A:94:66:D0:1C:27:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400ED7122FB557317459880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96250d73-6eea-3863-a204-a6b7b108ef49.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100d:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:ed:71:22:fb:55:73:17:45:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=d04fbdfc-d3e7-43f2-a6b4-5ae8c9a41aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:8f:23:5f:13:26:0f:93:78:ef:43:ff:82:
                    e2:80:2a:73:91:b1:ba:2e:1d:51:32:8c:fc:e0:c7:
                    54:eb:6f:7c:e3:e5:dc:16:3a:28:f2:17:bd:56:ed:
                    bb:86:95:03:ac:20:6b:f4:24:05:5d:41:4e:7a:19:
                    59:0b:c7:3f:34:1a:ee:5e:0a:6f:1c:26:10:a4:17:
                    ab:ef:69:7c:2f:b3:92:b3:39:9a:f0:51:13:bd:ac:
                    64:82:5d:26:46:31:66:03:ed:eb:d6:85:6d:34:65:
                    23:29:60:33:b9:fb:e8:9a:29:dd:62:25:ca:32:30:
                    ec:e0:9e:26:98:78:66:ee:81:59:fc:27:17:09:f0:
                    84:55:d8:0d:22:7a:ad:68:9b:c9:88:84:d5:3c:ec:
                    30:6b:5d:02:2d:cd:c9:a5:10:d3:36:7f:c8:95:f4:
                    56:88:2c:d7:52:7b:4c:4f:93:a6:cd:05:cc:d1:29:
                    5b:9b:b8:a4:29:5d:99:47:3c:6d:f9:ee:86:6a:ec:
                    0a:a1:94:60:a8:69:2a:a0:fe:e2:37:69:63:fb:4b:
                    d3:a4:b8:72:e1:29:40:76:65:3d:1a:09:8a:7f:f1:
                    b5:52:c8:7a:d2:a3:db:32:12:b1:73:ff:20:9e:9f:
                    71:e8:70:be:2c:01:a3:79:c3:69:34:6b:cb:dc:68:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:0C:06:A6:6B:29:EF:5E:9D:59:2B:27:6A:94:66:D0:1C:27:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96250d73-6eea-3863-a204-a6b7b108ef49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:f2:f4:e0:71:9d:ca:a2:b1:c3:c6:75:db:a3:b7:f4:08:
         12:ec:30:d9:6c:7f:3e:1e:2a:92:7c:ab:1c:85:86:d4:2f:ec:
         71:4d:a8:ff:9b:85:57:07:e0:a5:16:e5:e7:59:85:15:46:93:
         ff:9c:46:55:6a:bf:1c:42:6b:55:8f:8a:57:76:9b:3c:bf:12:
         e9:36:e9:07:20:7e:da:b4:4b:58:d5:61:99:d1:09:d9:0d:3c:
         15:d9:bb:93:13:83:16:a4:fd:6a:6a:ce:82:00:f9:8f:f0:ef:
         15:1a:42:64:34:95:dd:22:a4:20:4d:19:59:21:09:67:18:fc:
         21:83:df:bd:af:85:26:dc:5f:e0:49:f6:4c:bf:b6:95:20:ab:
         17:31:db:dd:06:f1:21:30:df:5c:3d:2b:9f:e8:f5:cb:f0:56:
         54:0e:96:5d:9f:12:62:d3:b9:bf:ed:be:1a:12:14:f9:0f:3f:
         52:5a:a1:f5:94:7c:76:e3:3c:04:53:4a:b5:08:d0:f2:5f:e8:
         5f:16:74:7d:c6:68:44:8d:ba:33:11:7f:ee:bd:f9:49:07:4c:
         90:b6:d7:75:55:12:58:d5:13:33:f1:b2:1a:1c:05:96:d0:8c:
         46:69:a3:64:98:9a:a9:96:ef:8b:0a:02:ee:7f:84:0f:46:83:
         c0:4e:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:01:14 2025 by rpki-client