Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa
File:                     c1c66a84-c669-31df-bdb0-d17767bac3de.roa (raw, json)
Hash identifier:          r+fEcz1gQ3krJErqpDv85ETioaeBZkYLcDcv7nrDgTY=
Subject key identifier:   6D:19:E9:14:3F:50:F4:68:C3:7C:40:E3:ED:C0:B0:FD:08:AA:8B:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24848DECDCC02CB56974C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:b13a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:84:8d:ec:dc:c0:2c:b5:69:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7bd8d5a4-7461-4dbe-8584-dc1089b2f7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:17:03:5b:d9:ff:2b:26:a2:d5:f6:d6:53:
                    ab:42:a0:6d:dc:f5:cf:40:9a:a7:17:1e:ea:48:fa:
                    07:89:94:85:d5:f8:a6:25:78:de:2c:b2:2f:f4:80:
                    b9:cd:7b:34:d2:0d:9d:ca:6a:2e:3b:9c:26:99:8b:
                    2f:41:32:77:3e:ed:9e:bc:42:0a:d3:cd:4d:7b:d8:
                    71:b0:4e:90:2d:14:3b:ee:25:73:7c:90:bb:e4:32:
                    a1:05:66:5f:4b:a3:24:42:22:cb:ff:4e:83:c5:df:
                    9a:72:f3:a3:cb:41:ff:5c:3f:a1:cd:c9:22:00:9e:
                    71:76:74:17:40:89:78:bc:eb:00:fb:4d:be:05:da:
                    be:02:fe:0e:cb:b1:c3:f2:13:64:53:85:56:c7:be:
                    ff:d9:cf:f6:0c:cc:04:11:a0:1c:a7:da:0a:05:24:
                    f6:0c:8e:1b:be:05:2b:49:26:bc:f4:d4:89:69:45:
                    a6:74:9e:96:20:30:ba:6b:85:4a:6d:64:b9:40:b6:
                    ad:16:95:be:c0:8e:1a:8d:dc:37:03:13:f1:7a:87:
                    be:fc:45:7c:80:96:af:0e:ad:94:95:3b:ba:fb:68:
                    fc:e6:c1:f1:7a:c8:75:ac:c9:3f:91:14:78:f3:9d:
                    5d:77:5c:f6:36:44:14:78:c1:8a:77:5c:91:b3:30:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:E9:14:3F:50:F4:68:C3:7C:40:E3:ED:C0:B0:FD:08:AA:8B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c66a84-c669-31df-bdb0-d17767bac3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b13a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:53:12:97:da:47:4c:87:8c:a7:68:46:93:bb:4c:4e:16:18:
         86:fc:af:6e:f3:58:75:8f:ed:be:57:27:c2:70:61:56:37:6c:
         ea:09:c5:51:c1:0f:ef:f6:71:2f:93:82:80:bc:0a:fa:c7:3d:
         ce:4a:19:0c:fe:59:f1:79:19:f1:81:04:ce:ab:39:33:7f:d8:
         38:a9:d6:a0:27:7e:77:bd:a9:68:ec:d6:16:97:f4:e8:1c:0b:
         aa:f8:f1:ff:de:f8:1b:06:fb:8d:12:7f:9f:32:c0:4c:04:03:
         32:f3:0f:4a:ee:8a:d5:46:1c:91:95:9e:08:e5:79:c6:42:55:
         48:a5:15:e9:81:d5:8e:e4:fe:47:d3:83:15:74:ed:c8:f5:c4:
         e9:e1:46:4f:d0:fd:1b:c2:01:3b:5a:63:3b:db:65:5e:2c:43:
         fe:9f:b0:2e:4c:cf:84:7d:97:71:0c:80:ae:fb:5d:5c:31:03:
         05:74:72:61:63:27:fb:81:ea:ac:f8:f7:be:ed:15:a9:e0:27:
         53:17:cb:f0:33:a9:79:cc:66:3a:af:8c:3c:a8:c1:3a:95:af:
         d4:df:f5:18:24:0a:b5:b1:6f:c2:30:05:4f:65:a8:72:9f:10:
         79:ae:43:bd:3b:d3:90:58:ef:b4:c8:e9:81:c9:3e:a9:3a:2d:
         3e:58:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:16:04 2025 by rpki-client