Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa
File:                     a67bd7b6-53e3-3353-b7ea-05521b667b83.roa (raw, json)
Hash identifier:          yMX9wrPlOJ509zFzoPIYUMiMkC+y6w6d5/bqpdLvQ38=
Subject key identifier:   BF:D8:03:A2:5D:97:89:99:53:25:35:C0:D4:03:E3:1E:25:A5:6A:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2482A8BF02BA9FE69D6560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:b1e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:82:a8:bf:02:ba:9f:e6:9d:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=0514adfb-2ec3-46e1-98be-d23ff17a1e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:08:1e:00:5a:a1:de:c9:81:f7:43:4c:02:ac:
                    be:6d:f2:c8:0b:b1:60:f9:4b:db:28:5b:8b:40:87:
                    39:76:77:cb:68:65:cd:ca:c4:6c:de:97:45:70:a3:
                    82:db:dc:d0:e2:93:80:2d:bb:03:58:63:37:c2:43:
                    3a:93:34:ec:85:0f:b2:08:ae:cb:d3:62:d4:a7:fa:
                    75:e9:ce:ee:eb:29:fe:b3:a9:2f:0e:73:5a:99:62:
                    b3:bb:ef:23:08:95:1b:83:6f:40:e5:20:25:eb:57:
                    dd:30:e6:69:94:55:5d:5e:f8:a2:e2:24:45:0b:a9:
                    ba:8e:40:b5:90:62:82:a0:5e:fe:a0:cb:23:2f:03:
                    5e:62:61:2e:81:b7:70:84:5d:fd:63:24:55:17:a2:
                    24:cf:85:33:e5:fe:8c:5e:f1:2e:6c:30:f7:1b:ac:
                    e4:b7:08:1d:21:5a:29:06:c1:68:95:fd:19:4d:66:
                    42:69:62:d6:62:4f:ed:cf:85:2f:0b:ba:6c:b3:ab:
                    dc:f9:11:e5:72:9b:2b:28:01:89:d8:3e:02:e5:4b:
                    eb:98:3f:a0:75:ab:f9:67:8f:8d:28:bc:c4:01:01:
                    42:aa:6e:ca:0e:be:01:05:ad:d8:da:92:50:7e:46:
                    9d:0b:36:1e:04:d6:c8:c1:fe:03:39:b0:c7:62:9d:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D8:03:A2:5D:97:89:99:53:25:35:C0:D4:03:E3:1E:25:A5:6A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a67bd7b6-53e3-3353-b7ea-05521b667b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b1e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:6b:da:bd:cc:84:43:10:9a:1f:ca:49:bb:66:89:7f:a2:
         7d:ac:3f:e1:73:d9:55:89:52:fc:64:73:4b:0c:62:3f:0d:13:
         b5:e2:f9:87:42:71:8c:21:d9:59:5c:3b:85:ac:89:07:1f:d7:
         7a:c9:73:99:f3:f6:39:02:fd:b0:b9:e8:c8:bf:ce:8f:66:2f:
         ec:ec:1f:31:9e:07:b2:7e:23:82:f3:5d:f1:0b:51:32:98:15:
         cb:a5:47:04:c5:0b:5a:dd:a4:fd:d7:49:06:9d:65:0b:07:83:
         d2:55:36:4f:f9:69:f0:09:a8:a5:b7:bd:fb:df:03:a2:de:cf:
         69:4b:28:a8:e6:62:3b:12:09:b7:75:e3:30:31:dd:4f:c3:87:
         18:32:31:42:f2:3d:09:6d:b3:8d:26:62:58:ba:3b:0f:8d:9c:
         48:99:25:3e:e8:af:55:0b:9c:c7:9f:91:1b:2d:a6:8c:45:68:
         db:80:27:05:20:60:9f:f3:1d:e0:fe:64:56:50:69:43:e6:df:
         f3:cb:be:51:b7:22:d0:64:84:3b:19:7a:02:47:66:aa:25:15:
         c3:94:35:be:a6:1c:0c:21:70:5b:b9:86:da:0c:bd:d0:37:a5:
         94:c6:ba:57:a6:73:47:a0:4d:f4:b4:4f:57:82:f6:73:14:18:
         88:80:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:54 2025 by rpki-client