Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0dbc2f-8eb6-3cf5-ac5a-4ca645d54818.roa
File:                     ae0dbc2f-8eb6-3cf5-ac5a-4ca645d54818.roa (raw, json)
Hash identifier:          zfuxTPDLP/XRpqDclwZIUP8n+cKqxkesMV+NeXgzsCY=
Subject key identifier:   51:D5:4E:C3:DC:E7:8E:61:C4:0E:30:A0:C9:B1:8F:BB:E4:EA:44:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24492DF86CAF8026CDF7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0dbc2f-8eb6-3cf5-ac5a-4ca645d54818.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        2600:4040:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:49:2d:f8:6c:af:80:26:cd:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=b8ef1ff2-ffbe-4638-b5cd-784ccc74f27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:7c:6a:16:60:97:a1:1f:15:c5:91:ad:f4:
                    f2:26:e4:b0:84:0c:a2:c8:b8:36:cf:50:f8:84:0e:
                    cd:5d:ac:32:28:9a:cc:06:90:4d:df:64:57:da:50:
                    fb:b7:5b:eb:b8:d1:a3:42:dc:16:7a:6d:53:d4:86:
                    2a:46:c3:2e:f9:7c:e5:95:cb:ff:5a:5c:80:7c:4f:
                    82:eb:a9:f2:21:65:9c:15:5a:b4:8a:e1:94:a0:7e:
                    15:83:78:b3:6c:60:3f:68:6c:6e:1f:4a:21:dd:a0:
                    6b:4f:ec:97:30:57:cb:2e:84:66:8e:9f:08:9e:6f:
                    b5:b1:ba:ec:5e:67:8a:7c:72:3e:f7:98:b0:b1:8a:
                    f8:21:ee:fb:0b:4e:51:90:2e:ad:bc:a4:f6:01:fd:
                    53:a7:1f:ae:05:51:69:9a:f6:f1:27:d5:e4:7d:06:
                    18:a5:15:11:36:52:b3:f3:6c:cd:38:e2:1a:4a:ac:
                    d1:9a:bd:69:e5:b7:a0:e8:38:d2:45:a2:4c:30:8e:
                    45:17:1a:38:18:b2:cd:9a:3a:02:3c:71:cc:03:e1:
                    0f:cd:32:b3:f3:ec:a1:ed:e8:1b:d8:a9:6e:aa:58:
                    cd:c0:89:6f:02:4d:e5:4f:0b:57:94:f0:ac:a7:8d:
                    ae:8b:17:a5:db:58:47:97:6a:fa:12:ea:bb:44:19:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:4E:C3:DC:E7:8E:61:C4:0E:30:A0:C9:B1:8F:BB:E4:EA:44:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae0dbc2f-8eb6-3cf5-ac5a-4ca645d54818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:1f:2c:c0:58:c9:37:8d:31:84:0a:50:02:39:b5:5e:10:
         71:99:20:8b:17:92:f3:6c:17:cc:e8:58:e9:bb:3a:75:21:d0:
         9b:a0:76:c0:46:3b:8f:d2:f0:b9:ee:1a:08:01:fb:c7:87:6f:
         7e:29:6a:2a:58:c3:a6:ca:6f:b0:9d:90:e3:61:5a:da:cc:23:
         96:c8:a8:21:c5:8a:18:47:00:91:d5:f3:f2:b4:54:01:73:41:
         5c:1d:79:c7:fa:a5:41:39:08:37:e6:e0:c2:62:08:fd:db:64:
         f4:31:9b:0f:da:14:c9:07:96:67:7f:d8:bb:13:61:73:ac:72:
         0e:86:7f:c6:49:e8:80:aa:53:0f:35:fc:46:cf:1d:d7:ad:c2:
         8c:6b:cf:3e:46:35:a6:59:f4:64:b6:ca:d4:77:35:ee:0d:b8:
         89:76:b7:c5:ff:c9:af:3e:b3:91:de:30:75:22:7f:1d:6b:0e:
         8e:7d:d2:45:71:62:c2:e8:67:0b:13:59:a2:83:25:bf:bb:e2:
         d5:b0:2c:8b:a0:06:32:1a:a5:86:04:46:9e:60:0d:00:71:ed:
         eb:17:8d:43:df:b8:f6:ed:b5:00:cd:d5:03:06:0b:97:da:5f:
         a3:f2:4c:62:9f:a6:54:ca:e3:21:df:7c:43:da:f7:eb:ff:72:
         26:ab:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:46 2025 by rpki-client