Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f082cd8e-aaf7-383a-82a6-1576faefb311.roa
File:                     f082cd8e-aaf7-383a-82a6-1576faefb311.roa (raw, json)
Hash identifier:          Gn61XKKVUtMJrqIukjdcaDJVWZW9nfEPNK4S5dDuXGw=
Subject key identifier:   39:52:3C:3F:E8:35:CC:ED:FF:0B:7F:BF:39:00:68:CE:88:25:C3:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D0A623E3AC9CF642E530
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f082cd8e-aaf7-383a-82a6-1576faefb311.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100e:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d0:a6:23:e3:ac:9c:f6:42:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=87eac35c-8b9c-4f8e-8536-de45f263cb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:78:2c:41:3e:c4:0e:28:8d:7a:10:14:63:
                    a4:3b:6f:9d:a5:7b:67:7f:d5:01:5a:e7:da:c6:a8:
                    a5:c1:5a:a1:06:fc:db:5d:2d:b5:4d:02:76:02:73:
                    93:13:56:72:c8:56:d6:0f:d8:57:b1:f7:5b:20:8c:
                    97:0d:dd:5c:3d:fe:21:ed:a0:b2:7b:cf:10:66:83:
                    24:37:7f:9f:15:16:53:0c:dc:58:92:eb:f7:fa:d3:
                    c7:2f:a2:1a:2d:ce:fc:30:69:95:9f:14:02:f7:a5:
                    5e:68:d2:a8:f2:7c:53:9d:60:f2:34:62:38:62:e1:
                    7f:30:0f:1f:62:cf:91:56:76:cb:01:12:cf:e1:d7:
                    c6:9b:c9:91:02:6a:02:39:82:f3:5a:dd:e0:5a:7e:
                    25:5a:99:82:af:a7:c3:6d:e4:48:6c:b8:b5:3d:8e:
                    93:91:8c:5d:9c:4e:0c:7e:5a:95:dc:ba:97:5d:29:
                    f2:e6:f5:22:87:cf:11:0e:60:0c:d5:92:8d:d5:90:
                    62:e9:e3:f0:5a:d1:57:82:04:22:8c:f1:e3:79:de:
                    51:3e:bf:05:ee:66:cc:c3:c0:ab:13:1b:2d:c0:65:
                    2b:db:ca:6a:09:d3:5d:22:dc:e0:99:bd:07:bb:75:
                    81:3e:21:10:99:b2:17:70:9b:fd:fe:95:18:f8:f5:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:52:3C:3F:E8:35:CC:ED:FF:0B:7F:BF:39:00:68:CE:88:25:C3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f082cd8e-aaf7-383a-82a6-1576faefb311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:df:9c:8d:8f:f7:8a:e0:27:97:21:3d:41:2f:0a:03:28:
         62:33:9b:29:b1:f3:d6:45:e2:0a:ca:95:03:3a:b1:e9:2e:ce:
         27:7a:71:28:4e:c1:f9:77:de:13:04:6e:a8:0d:16:34:b5:17:
         b6:c1:55:af:ae:40:ee:f5:71:f1:58:7c:a1:81:65:a9:9e:d8:
         4e:ac:47:b8:98:39:d5:4c:24:12:e6:c1:b2:2f:90:50:13:28:
         d5:8e:c0:72:38:23:7d:99:47:62:6f:25:eb:7d:3f:54:84:3a:
         22:3f:60:4d:95:2e:bb:fa:47:1c:60:33:a2:9f:94:93:ce:ba:
         38:5a:bb:b4:28:5c:75:c8:ca:7b:5f:44:78:5e:f7:2a:84:a6:
         3b:ee:5b:17:f7:3a:c3:14:fc:bc:6e:fe:6f:82:84:87:10:e7:
         f5:d1:08:69:82:97:8f:33:7b:ba:42:a7:58:de:27:b4:f1:37:
         f1:f0:47:aa:b3:0d:86:63:2f:9f:7d:2e:bb:e9:2b:26:ef:e4:
         28:2e:53:a4:0e:d1:fb:0a:8e:de:d2:dd:a7:38:50:9c:ad:c4:
         0a:de:f9:64:fd:f9:a4:9f:a7:e1:28:d1:2a:0b:0f:24:19:ac:
         bc:1d:97:4a:bb:fc:07:4f:fa:c8:d4:1f:0e:d0:6e:d6:e8:f3:
         84:2b:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:11:58 2025 by rpki-client