Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfe50203-18ff-34fe-8475-6f313a9f2c8a.roa
File:                     bfe50203-18ff-34fe-8475-6f313a9f2c8a.roa (raw, json)
Hash identifier:          67l0dRzkZyrGaKMN5GRNx9iLQz8p9hlGvD+0VO94R/8=
Subject key identifier:   E3:E6:D4:70:A1:20:61:C9:1C:42:03:57:FA:10:25:D6:FB:05:7E:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA92FA8C2CCDAA437FC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfe50203-18ff-34fe-8475-6f313a9f2c8a.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:b350::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a9:2f:a8:c2:cc:da:a4:37:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=d8623fdc-003c-480e-a345-ef915dd32efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:e7:81:6c:82:e5:37:fb:d8:f6:4c:b9:08:
                    c1:69:26:fe:01:3d:7a:2b:87:d2:4a:17:90:2d:88:
                    8c:61:4f:37:67:42:37:9b:7a:e2:71:f3:20:58:e8:
                    54:1d:9e:f6:39:19:86:9b:31:34:48:d9:df:57:4d:
                    25:8e:b0:ab:31:0a:ad:65:41:19:bb:c4:7f:24:25:
                    af:fa:76:65:f0:e1:be:d9:41:ea:0f:73:6d:eb:32:
                    c3:d9:8f:b6:53:aa:b3:77:02:2e:28:88:3a:86:ef:
                    cf:38:86:5d:f2:e9:39:7e:89:82:5b:77:b7:a0:cf:
                    6d:e8:3d:60:ce:44:5d:28:82:69:3a:2e:0e:53:db:
                    6a:18:0d:f1:3d:0f:29:4c:dd:93:3a:dd:85:5c:ee:
                    20:7c:9b:1e:96:03:91:c7:8c:d0:77:85:35:b3:f0:
                    c1:f3:c0:d7:10:64:da:18:ff:64:03:e6:7c:a3:fe:
                    b5:54:ec:7a:f4:84:f4:cd:90:84:26:a5:e2:fd:cd:
                    cf:87:db:ec:f1:71:c7:b4:39:e1:26:79:09:53:0f:
                    70:58:b0:68:6e:51:e7:8d:86:40:47:55:34:76:84:
                    1f:b4:af:a6:14:e5:0d:21:78:6c:ee:49:8e:9b:b6:
                    d1:79:6d:a0:18:6b:20:c2:6a:ed:ad:66:7e:c5:3b:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:D4:70:A1:20:61:C9:1C:42:03:57:FA:10:25:D6:FB:05:7E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfe50203-18ff-34fe-8475-6f313a9f2c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b350::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:29:8b:b1:b8:bd:bd:44:46:de:b2:27:9f:96:eb:c4:84:
         8e:e7:39:35:8b:97:58:45:af:cf:b8:e0:a2:31:24:23:34:b6:
         17:ac:83:ee:b6:a7:1f:32:62:2b:e6:5a:05:69:40:ea:28:64:
         0a:35:49:7a:22:e4:46:fc:99:71:8c:fe:a1:99:04:cf:c2:7f:
         1e:e0:18:85:0b:cd:fa:04:bc:c2:96:a6:70:d0:80:61:f5:f2:
         9c:c8:ad:88:cc:5b:77:68:8a:a2:fa:21:01:16:ce:29:d3:94:
         40:59:f1:f9:5a:d1:d2:ce:eb:1c:be:d5:d6:af:35:7a:6c:fd:
         b6:ad:48:ba:d3:e9:49:c9:6a:47:b9:05:31:e6:59:b5:84:e9:
         e0:4c:84:fc:0f:66:e3:5c:b1:43:39:10:72:8e:58:d5:a5:77:
         96:ff:aa:ab:91:3c:d3:97:08:84:87:59:1d:5c:98:67:d4:aa:
         21:e1:3d:f7:5b:be:54:d0:a7:32:ec:58:86:8a:80:dc:34:d7:
         73:c1:4d:34:8e:97:3e:8e:26:2a:94:7e:71:02:14:12:b2:8e:
         1c:e4:d8:78:3a:f5:ce:f5:80:c1:94:a5:7c:57:0c:73:c7:35:
         aa:1b:e7:49:cc:5a:29:61:43:b7:ce:3d:49:61:fc:79:96:f3:
         fb:f9:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:36 2025 by rpki-client