Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f865ea1e-175a-3417-8c2a-952fb3fe077e.roa
File:                     f865ea1e-175a-3417-8c2a-952fb3fe077e.roa (raw, json)
Hash identifier:          GQsSpuW1eaDHDBbOmg1Ik6tqu1vVrR3RYEgMMOCH2d8=
Subject key identifier:   D4:2A:83:FA:37:45:FE:AB:FB:14:44:17:CC:43:70:02:7C:B6:54:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2486672C8DF3D8BFF18190
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f865ea1e-175a-3417-8c2a-952fb3fe077e.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1003:b460::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:86:67:2c:8d:f3:d8:bf:f1:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a8c67837-62fb-4e2e-95db-11f2bb5ddb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:f6:aa:e5:0b:34:18:81:d1:8d:67:bd:a1:
                    65:2b:63:e8:1e:1b:89:05:a3:2b:3b:5e:bc:0c:53:
                    76:b2:dd:41:d7:e9:6d:bf:cc:6a:79:83:f7:47:c7:
                    76:6e:03:eb:08:28:11:b9:14:78:fe:9e:7d:97:ed:
                    42:9c:4d:c1:d8:c3:04:0a:cd:1a:0e:fd:e5:db:2c:
                    c1:d2:ab:38:1d:20:01:bd:d1:81:e2:dd:98:2a:22:
                    9f:e1:39:9b:1e:17:cc:a4:e7:d3:e9:f0:ed:f8:fd:
                    ea:74:10:ad:f6:62:d1:9b:c5:3d:79:78:4c:a6:13:
                    4d:6e:67:62:6e:5a:24:3b:85:e3:ea:eb:da:d5:b2:
                    46:c3:66:4a:37:a6:e6:09:09:56:79:36:d9:65:81:
                    8a:ae:4d:9c:f2:96:b3:56:2b:69:90:a2:6f:a9:ce:
                    29:f8:0a:c9:78:a1:47:3b:22:44:10:c7:43:71:df:
                    8a:5c:8c:c2:f1:01:ad:7a:1b:1f:cd:ad:5f:bb:d6:
                    8f:79:ae:4b:d6:63:59:93:fb:a3:cc:09:ce:8d:40:
                    c1:b7:23:f4:07:25:11:0f:4c:de:80:92:42:26:94:
                    ea:a7:66:c0:83:e7:a3:d9:81:13:8c:5c:66:00:d1:
                    f4:e0:5b:0b:c6:02:a4:6d:4a:49:84:b6:35:1d:d7:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:83:FA:37:45:FE:AB:FB:14:44:17:CC:43:70:02:7C:B6:54:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f865ea1e-175a-3417-8c2a-952fb3fe077e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b460::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:e4:c3:53:11:36:93:81:52:d0:df:57:b7:95:de:9b:64:
         da:76:73:ec:44:e5:eb:9d:91:73:9d:53:65:2e:89:09:f3:65:
         64:01:9c:58:a6:e8:46:b1:50:e1:75:46:65:b9:83:65:17:8a:
         55:a7:53:d7:54:b6:2f:58:da:26:15:7a:bb:21:8b:5c:60:59:
         25:93:b2:1b:8a:8a:0e:a4:3d:bc:13:32:e9:21:ed:dc:89:96:
         08:cf:a6:48:e7:b4:2f:f3:9e:15:2a:78:f3:2a:93:6d:f1:68:
         13:6e:08:b3:91:c9:b3:fa:37:40:7f:b3:07:58:0c:5b:ee:81:
         51:42:b4:2f:d7:71:26:82:9d:16:4e:6d:84:20:18:9a:c8:40:
         3c:9a:0b:8b:a0:fb:ae:8e:57:2b:a6:8a:3e:69:e3:72:70:c6:
         c0:ba:bf:37:71:f3:27:09:7e:1f:d3:2a:7c:58:94:d3:77:4b:
         6a:b3:58:74:48:8c:bd:0f:4c:4f:6a:b6:f6:09:bd:6d:69:76:
         6d:ab:db:f6:7b:eb:0b:03:b9:86:8d:34:05:41:73:0c:48:bf:
         85:3d:d9:89:5c:68:64:22:6b:8a:8d:2b:65:e7:1a:70:29:60:
         64:f8:46:62:16:39:e9:a5:b8:d5:94:dd:03:56:e5:b0:49:43:
         02:ed:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:30:37 2025 by rpki-client