Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa
File:                     b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa (raw, json)
Hash identifier:          247c4qUygZytHHG3yaBsF5rcYwI8bkTwVS/RsgX4Zzc=
Subject key identifier:   2A:7B:2F:47:32:B2:3D:A1:64:5A:ED:41:89:9A:9F:09:25:9B:04:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245E92CA3231CB9FDDE9BA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1006:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5e:92:ca:32:31:cb:9f:dd:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=867d81dd-9875-4910-b667-aafd7fe73d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:64:54:9a:02:0a:ea:a1:be:5c:b2:18:fc:
                    7e:71:b1:19:73:fa:c6:94:f6:17:e1:bd:aa:ee:c7:
                    c2:e2:0f:e3:53:20:1c:2b:90:d7:38:e3:30:3c:c4:
                    0e:a6:b8:9b:8a:35:4a:19:bb:90:68:05:a7:95:5b:
                    f7:8d:c4:31:e5:19:59:23:6c:21:be:08:aa:b8:99:
                    a3:30:94:23:72:77:5d:a3:8b:14:e5:db:3a:83:03:
                    d3:a5:51:b0:c6:75:ec:ba:36:0a:7b:cb:fb:a8:e5:
                    96:b0:09:1b:9f:14:e2:15:a7:d1:7e:d4:2f:d4:2f:
                    6e:56:bd:49:25:fa:3e:f8:85:74:ed:0e:a6:03:8a:
                    ab:cb:8b:ec:ef:12:6a:8b:89:03:a9:60:06:61:a8:
                    f1:ff:a2:b9:eb:a2:1a:58:18:53:7b:68:74:48:dc:
                    df:ce:e7:71:1e:03:f3:42:64:35:6f:b8:63:b4:cb:
                    0d:f6:0e:43:26:4d:bb:3e:66:89:6c:7a:6e:68:28:
                    f2:5c:2c:88:37:e8:67:28:82:a9:b6:3c:8c:b8:25:
                    67:13:91:73:14:dc:a6:93:bd:88:0b:9a:44:13:df:
                    e1:2e:bc:18:1c:c7:af:a0:12:2a:ea:9b:76:72:c3:
                    03:3d:77:09:5f:fd:be:f9:4e:d9:55:d6:78:49:8e:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7B:2F:47:32:B2:3D:A1:64:5A:ED:41:89:9A:9F:09:25:9B:04:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ed2d30-ac5c-35e0-b5fd-7bd16f67b53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:00:16:9b:2d:22:e3:16:f1:06:35:7b:72:4f:68:70:41:
         07:0d:68:a4:5f:e2:f7:be:37:be:83:38:fc:43:73:9a:d3:59:
         b5:67:21:8f:c1:71:59:4f:8f:f7:45:e2:45:c9:63:d8:31:e5:
         8b:6b:3f:f6:f8:c9:31:b0:fc:18:22:e7:f6:d8:c9:7f:25:6d:
         ae:8f:2a:e6:6b:59:56:8f:80:d2:54:59:59:39:1f:30:01:d5:
         7a:d3:b7:73:d7:a0:bc:1c:fc:cc:1c:a3:40:a7:27:f2:a5:76:
         dc:97:56:eb:0a:00:4b:f5:eb:de:79:89:bc:d8:3d:f4:9a:30:
         fc:9e:14:93:b2:82:21:8d:16:9f:87:cb:3f:0e:b1:4c:f0:7f:
         ac:23:73:78:e7:88:28:45:30:ec:b0:7e:a0:a9:65:91:bc:48:
         c5:00:e0:4a:28:63:6d:5f:79:a8:ee:85:0d:02:f2:8c:0a:e9:
         14:36:b6:d9:2d:15:ed:67:1d:f6:32:90:f7:57:dc:30:10:91:
         23:e5:a1:58:11:e6:03:02:54:8f:ae:4b:3c:c2:72:aa:7a:33:
         e3:8b:a5:33:fa:fe:4d:a1:76:28:29:7d:6e:be:2f:41:15:03:
         c7:5b:20:20:af:7e:08:41:f0:c1:4b:5c:39:ae:eb:3f:88:09:
         de:37:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:00 2025 by rpki-client