Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa
File:                     d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa (raw, json)
Hash identifier:          e9n40YHGqJ0+gp8cFl3saO45Xk5loX116UpP1SLecfg=
Subject key identifier:   59:A0:6C:95:B0:09:5C:60:10:0A:CB:77:BA:FE:0C:C8:E0:F0:B1:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9DCD4618C102D5D2507F
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1010:b1ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9d:cd:46:18:c1:02:d5:d2:50:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=ddb2b968-969d-4c04-bafb-ae42ce54afe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:76:24:0a:e3:28:0d:ee:b6:78:9b:0e:ed:
                    51:89:62:dc:8b:ef:dd:9a:4e:40:bc:50:f7:b4:b2:
                    63:50:f6:52:99:44:58:fb:17:6a:0c:b2:6b:c3:59:
                    62:2b:14:96:93:1a:f5:8e:bd:9b:35:eb:76:8f:5f:
                    af:57:11:48:c1:bf:22:9c:11:e6:5e:72:a0:d9:d3:
                    57:7b:ea:74:a6:88:16:b2:e7:f1:90:d0:1f:2b:61:
                    6c:8b:47:ec:44:c9:81:6c:4d:5d:94:50:e3:d0:54:
                    99:ce:d8:a1:11:98:28:fb:d9:04:ef:ac:e7:15:fc:
                    df:43:b1:16:a6:a3:08:7f:8a:8e:a4:9b:5d:d5:16:
                    96:3c:8d:0e:83:f1:d6:24:78:01:c2:b1:b1:85:7c:
                    e8:39:cf:bc:92:2c:85:17:61:61:4c:97:51:2c:d1:
                    b7:06:58:1f:f3:5c:f3:4b:11:2f:8a:5c:bf:f1:56:
                    8b:e4:ca:18:88:3e:60:4c:64:48:de:5f:6d:23:2b:
                    e0:17:24:9e:5c:6b:49:71:98:77:ac:52:77:2e:12:
                    a4:8a:20:bd:d9:93:18:00:54:57:13:79:25:1f:dc:
                    ff:11:a6:0d:75:41:36:65:6d:d5:15:74:b7:59:f8:
                    fb:c2:47:30:f2:ff:56:a9:4a:47:a8:a0:bd:12:a0:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:6C:95:B0:09:5C:60:10:0A:CB:77:BA:FE:0C:C8:E0:F0:B1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b1ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:15:1a:1d:da:1b:57:e4:5f:ee:be:cc:92:b8:30:74:5c:
         74:b6:71:20:1a:ce:4e:2b:a9:c7:04:d5:9f:f3:f1:28:7f:69:
         67:65:1c:fd:ee:13:75:01:99:31:24:54:30:57:7d:30:16:e1:
         ae:28:2e:e4:d1:88:63:f1:3f:f0:98:92:bc:54:7d:2c:3c:1a:
         c9:b2:6d:31:f3:fa:95:84:80:e6:2e:1c:46:82:6a:cc:48:d5:
         29:be:49:02:00:2e:79:58:bd:85:45:77:c2:af:06:98:35:87:
         4f:5f:37:2e:8a:59:c0:fb:a7:4a:e5:e2:b0:d5:da:d6:b6:27:
         23:c7:02:bc:a6:04:08:85:b4:29:da:ef:21:35:c4:41:59:ff:
         af:f5:d3:f1:95:05:a0:79:d0:f4:5d:04:1f:ee:07:24:b6:be:
         dd:38:26:fc:2e:95:d1:d2:d1:43:34:a8:0a:49:a8:b5:c4:6a:
         67:c4:db:a1:f9:f7:39:51:88:c7:47:76:83:5f:f5:1a:d2:30:
         fc:e8:40:b2:20:4d:16:e5:20:dc:d2:78:9b:fa:e4:32:b3:b2:
         0e:9e:f9:40:c8:9a:b7:64:70:d8:30:4e:e9:17:b1:0b:95:d4:
         d2:1b:72:c1:20:95:01:9e:b7:33:32:21:76:50:66:c8:d1:30:
         09:03:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:26:21 2025 by rpki-client