Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
File:                     dcb1715e-4160-33b3-9acd-5037d569e3e6.roa (raw, json)
Hash identifier:          SPKtnwCMN+mh7TN/YOeJ1BDDpl29HPuVprlItlG9jYw=
Subject key identifier:   2C:AA:75:59:14:C3:25:BE:13:AE:C5:E6:AD:30:18:83:10:B8:E6:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E3067F07A81097A93760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1009:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e3:06:7f:07:a8:10:97:a9:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=5cd13246-3452-48b2-9058-c6a5bf156382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:bf:ba:26:7d:94:25:23:d6:9e:5e:b6:c0:
                    7e:b1:0b:fe:f8:79:17:56:03:bb:81:de:e6:d0:da:
                    b3:df:59:79:a5:d8:b1:a3:04:20:17:ff:63:59:0b:
                    cc:f5:dd:75:8e:13:d8:6e:88:ad:68:78:0c:6f:fc:
                    56:ef:10:58:47:29:43:61:3b:12:8c:3b:8c:f2:7e:
                    29:f6:19:6e:fb:3b:f2:f7:ef:ac:0b:a4:5f:f5:25:
                    e9:8f:af:d7:07:77:39:2a:a0:a5:32:8c:61:3d:b6:
                    9a:3d:85:9e:b0:a0:00:50:8a:04:66:91:f3:19:20:
                    8d:35:38:9d:7e:58:3e:32:7f:a7:0f:b3:e0:a1:58:
                    54:52:8c:c9:d0:df:e9:1c:00:b5:e3:dc:12:81:b3:
                    80:c4:43:37:b0:30:f2:55:f2:8e:da:10:9f:ba:08:
                    36:f4:ef:f9:92:90:f4:c3:ce:8a:12:a6:b8:61:8b:
                    52:9b:cb:ba:55:b0:b1:a8:d3:78:76:ed:ca:97:c9:
                    f2:39:7d:f2:bb:cd:9d:a5:70:47:2d:79:9f:e3:ba:
                    59:8e:ed:4e:a3:6c:87:3b:30:0b:22:7f:ae:39:89:
                    b3:17:87:94:8b:31:8d:84:55:29:8f:18:8e:12:4c:
                    07:08:a0:ce:4d:79:ca:3f:5c:70:e8:43:8b:1c:1f:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:75:59:14:C3:25:BE:13:AE:C5:E6:AD:30:18:83:10:B8:E6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:79:a7:4b:98:fa:74:ba:6e:cd:5f:c0:a2:ed:10:db:a7:6b:
         b9:10:52:02:c2:0c:6b:5c:43:c8:26:dc:63:69:cb:44:c5:9e:
         fb:4c:d4:d1:91:8c:f3:b6:b6:15:c7:36:c9:6d:a5:ba:51:c6:
         26:e7:d2:ab:fd:d1:83:94:cb:69:a8:9e:6c:12:3d:5d:f0:7b:
         12:6b:41:51:e5:c1:ff:78:c9:f6:b6:e3:2a:d6:b3:ca:48:ca:
         5e:92:5e:1f:d5:e9:b6:14:6b:f6:19:2a:b1:c7:f5:ca:bc:96:
         ed:7b:e7:bf:5a:12:39:1a:69:99:da:5f:95:6c:f5:c0:fa:f4:
         26:95:49:d4:63:44:3c:1d:6c:0d:f2:70:82:2e:29:0b:4e:62:
         96:e4:b0:48:f2:22:4e:6e:74:18:d7:c4:21:ce:67:03:ea:2e:
         d5:d1:e6:8d:29:66:66:76:b2:c6:ae:43:0f:65:8d:e1:ca:8d:
         4c:74:e4:c3:88:86:52:bf:04:41:47:6a:56:0e:b3:45:fb:9a:
         6d:a1:b0:3c:60:4d:31:c1:7f:19:db:e0:66:8f:81:ce:db:33:
         95:ff:1f:71:a0:d1:90:c8:18:cf:db:f0:5b:e2:dc:9d:02:d7:
         8e:36:45:6a:64:5a:2c:9a:ff:97:aa:b7:8b:47:10:56:a3:58:
         ae:80:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:40 2025 by rpki-client