Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
File:                     f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa (raw, json)
Hash identifier:          tynFwA5upJyj5YXt80DszwcGSB/mJgV+oC+gw9suD44=
Subject key identifier:   49:04:FA:7C:2A:67:1F:A1:26:ED:52:1B:E3:14:C8:48:97:83:6D:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C41B8398ACA3EF801B7FA580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:a021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:83:98:ac:a3:ef:80:1b:7f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=fdd0ccf9-2a88-4a80-8647-5fbc434782a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:e6:5f:43:ab:95:f5:8b:3b:05:f8:e6:06:
                    e0:bb:42:c1:42:3d:1d:39:c1:47:6c:0d:1e:84:c1:
                    0a:c3:3f:b0:30:e7:33:f8:20:64:e6:8f:fc:ed:4d:
                    49:62:9e:f2:6f:d0:1f:c6:e9:67:cb:c3:23:92:1a:
                    9a:56:ac:5a:b8:11:0e:30:30:09:58:00:c4:53:96:
                    76:d2:f8:60:ae:aa:bb:0d:db:8e:6e:34:7d:01:2a:
                    3e:78:12:ac:f4:7f:44:ed:0f:a5:ad:79:f4:fb:9b:
                    94:5e:41:60:65:5a:8c:aa:d4:6a:86:3b:57:01:4b:
                    86:ee:92:ab:dc:50:b5:ef:8c:9f:74:3a:57:bf:e7:
                    ef:32:eb:d5:5f:e1:de:b0:5c:ae:11:20:93:39:24:
                    f8:10:7c:f5:78:b7:64:16:b6:21:f2:8e:ca:53:81:
                    c7:8b:96:06:1f:ca:c0:d4:24:2c:7e:97:c4:86:1a:
                    5e:91:73:5c:bd:31:38:28:83:ba:0e:1f:86:e1:25:
                    e5:f4:a9:eb:6c:5f:c2:4b:19:bc:0e:f9:8c:79:7e:
                    9e:ca:2b:ae:2f:2b:be:0e:56:20:05:29:c0:2f:fe:
                    bd:ee:8a:65:cb:00:ac:50:31:92:96:5a:d3:7b:87:
                    d5:2c:fe:3c:f2:2e:52:1e:2d:90:2f:85:f2:6d:7c:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:04:FA:7C:2A:67:1F:A1:26:ED:52:1B:E3:14:C8:48:97:83:6D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:52:df:bd:ef:75:51:52:7a:0d:af:77:70:31:6b:fe:ae:
         75:f8:6f:16:62:12:33:e1:e9:6c:2e:57:d6:ac:17:62:ce:ec:
         c9:4f:1e:38:94:af:25:7f:00:17:5a:be:77:23:73:2e:3c:5c:
         02:9f:76:e2:ca:8e:44:99:42:e8:29:6a:29:50:3c:6d:de:59:
         3e:ce:fa:9e:a1:8c:e4:ab:a1:30:80:fe:cb:2f:ea:c5:ac:fe:
         1f:87:8e:40:c4:13:82:0b:a8:35:78:76:d0:3f:28:f1:3e:3f:
         0f:8d:36:b6:16:76:e1:d1:f1:87:05:34:e3:48:bc:a7:44:f3:
         68:9a:07:82:87:bc:dc:53:12:a0:36:d7:99:49:55:ab:22:a7:
         05:ff:20:d8:b3:80:3b:32:47:48:f9:bc:9a:90:c3:cc:a8:a1:
         1f:9a:c0:3d:39:de:9e:df:b2:ac:b6:55:df:01:30:ef:33:8f:
         9e:6e:b5:e4:80:f3:96:85:a7:2b:7e:fa:4d:e3:ad:36:a1:ff:
         dc:ab:54:88:2b:c9:ac:a4:2c:6a:05:cd:49:1f:27:c8:53:cf:
         3f:79:9b:dc:af:e5:d1:66:c9:f9:a0:f5:43:35:58:9c:aa:b6:
         31:11:c5:bc:e5:e7:6d:47:f8:a7:14:4c:f2:c2:e6:ed:bd:12:
         10:da:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:22 2025 by rpki-client