Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ae27b6-0f84-3a8a-a335-50ca29bfd954.roa
File:                     b6ae27b6-0f84-3a8a-a335-50ca29bfd954.roa (raw, json)
Hash identifier:          tp/kgpq0QQipcsQwm6/S32CHtMD4l/MLuyP3yUBgBmw=
Subject key identifier:   6E:FB:BA:DA:84:2B:2B:FF:4F:AE:E7:7F:AB:B3:E4:A0:F7:EA:78:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400CFA8FD2989001DD7C920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ae27b6-0f84-3a8a-a335-50ca29bfd954.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100e:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:cf:a8:fd:29:89:00:1d:d7:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=49cbfac4-78fe-470d-b049-3c3459fa4dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:f0:a2:ac:08:d4:22:ef:0e:13:70:1c:c9:
                    ac:cc:a3:21:8f:07:f8:b6:5a:26:c5:72:5b:c9:4a:
                    e2:77:57:a3:99:3b:c1:98:36:b5:11:b4:6b:d9:92:
                    28:2a:b3:b6:8a:fd:b9:83:80:53:26:47:78:38:06:
                    1d:4d:2c:7e:29:34:16:a1:ce:c9:80:c2:e4:bb:3b:
                    a7:1d:73:3f:f8:1a:54:48:0b:b2:d1:fb:80:e2:20:
                    d1:44:77:a5:3e:52:b6:5d:a1:eb:db:13:f1:52:e5:
                    e6:70:1f:08:32:62:ba:12:35:7b:82:c9:3e:4f:87:
                    3c:2b:79:c1:11:1f:76:71:44:75:df:2b:6f:7c:cb:
                    d9:f3:17:b4:a1:30:3a:82:a2:a1:c3:f3:64:01:e8:
                    07:18:64:48:95:a1:33:13:32:69:cd:d1:cc:98:a0:
                    60:b1:97:6c:d1:6e:58:ed:dd:a9:61:2d:29:47:ff:
                    18:bc:d3:50:81:cf:66:88:6f:d3:3c:0b:28:f7:e3:
                    e7:43:dc:20:ba:80:00:c8:63:46:f5:17:2b:6e:17:
                    ae:a2:4a:a7:12:b5:5c:0f:9c:fd:c9:35:b1:99:6b:
                    23:82:25:73:2c:be:89:6f:20:d8:5e:5b:2f:f2:3b:
                    f7:3a:3d:2f:9e:8a:d5:39:79:4f:dc:d0:c4:6f:c3:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FB:BA:DA:84:2B:2B:FF:4F:AE:E7:7F:AB:B3:E4:A0:F7:EA:78:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ae27b6-0f84-3a8a-a335-50ca29bfd954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:85:8a:69:ed:b1:0f:80:47:53:40:64:75:bc:09:7c:50:
         75:9d:8c:ec:e6:64:8d:6b:c7:99:c8:07:d5:b1:fe:fd:36:d1:
         57:e5:5b:41:df:32:c9:c3:aa:cf:48:02:e3:93:da:1a:83:28:
         ec:d4:dd:3e:85:6c:39:49:d6:ce:74:3e:1a:84:1b:b4:e8:29:
         1d:2a:a7:d0:4b:83:2d:c5:88:78:d4:90:36:a9:93:da:f1:88:
         17:7e:11:08:fc:40:32:68:79:e3:71:1d:80:87:93:8a:60:97:
         d9:b3:30:d7:d7:c6:8a:69:ce:64:fa:2e:1e:56:83:e6:cc:fd:
         df:19:77:b1:7f:b8:34:95:7f:16:81:ae:d9:e6:fa:65:c3:ef:
         a1:48:11:1d:32:ef:06:3e:d9:fa:e8:a1:57:6a:c4:d3:dd:dd:
         2c:c3:ce:eb:e0:df:33:ab:a2:8b:d9:99:7d:ea:52:25:80:17:
         f4:02:62:b5:6d:e7:2a:d2:2a:e1:02:bd:6c:53:fc:a4:42:30:
         c8:a5:20:4c:0b:8c:09:0a:f6:1f:f4:e3:c9:9d:b7:ec:23:e8:
         c8:60:cc:0c:da:13:2e:ea:fa:cd:aa:54:61:1c:27:fc:37:a2:
         9e:04:c2:7d:4c:19:cf:3d:2e:b3:1c:6a:35:31:37:62:96:33:
         2a:e5:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:01 2025 by rpki-client