Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8796f8f-0819-3957-82b2-7a41984a5dde.roa
File:                     f8796f8f-0819-3957-82b2-7a41984a5dde.roa (raw, json)
Hash identifier:          UUiQ24lI+mU1PdzUY2aHbCtK7iAOwfWBBHZp/XPDgjA=
Subject key identifier:   39:0C:3F:85:86:EC:06:17:61:83:9B:14:5F:9A:45:51:E2:BA:DE:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493B5AC7E660F87CC765D50780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8796f8f-0819-3957-82b2-7a41984a5dde.roa
Signing time:             Tue 18 Mar 2025 19:09:26 +0000
ROA not before:           Tue 18 Mar 2025 19:09:26 +0000
ROA not after:            Mon 16 Jun 2025 19:09:26 +0000
asID:                     6167
IP address blocks:        2600:1002:b080::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:5a:c7:e6:60:f8:7c:c7:65:d5:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 19:09:26 2025 GMT
            Not After : Jun 16 19:09:26 2025 GMT
        Subject: CN=b0f81d5b-60a8-4ea6-8a51-6f15418672c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:ac:28:99:fd:45:d8:3e:3b:78:4b:69:d3:
                    46:0e:a2:3d:28:de:ef:53:8e:2c:ec:fd:ed:f4:f3:
                    79:dc:08:e2:a2:8b:6c:8e:e3:4c:2f:19:fc:ee:5a:
                    2b:20:2f:08:af:db:69:46:76:bc:6d:6e:62:58:ea:
                    ad:28:0b:92:fe:f0:0f:f8:d8:ff:71:67:cb:2b:39:
                    4e:48:2d:74:7b:25:84:1c:e8:33:9d:01:c5:c5:f8:
                    11:68:3c:00:2b:fd:6c:20:14:01:af:bf:52:cd:ee:
                    fb:e1:0e:a9:ba:c8:98:37:aa:49:b8:da:1c:0a:ff:
                    f1:94:de:55:ef:44:db:81:a0:3b:d3:f5:c8:e7:1c:
                    9d:6c:d8:4f:a3:fd:f1:17:fe:fe:70:b0:7a:32:55:
                    9c:18:3d:94:b6:91:28:ea:a9:05:16:e4:95:9a:ff:
                    ce:50:a2:4a:1c:34:d6:05:5c:55:1b:40:be:cc:8c:
                    0e:42:45:6e:d3:77:b5:fb:75:9a:50:81:6c:21:e2:
                    51:26:73:4a:76:d8:fd:f2:5a:cb:3d:5f:ad:24:eb:
                    24:ad:c9:d6:22:72:3d:7a:b0:cd:32:59:46:30:23:
                    92:c8:09:47:9f:31:72:4f:15:e6:9f:82:70:b0:7c:
                    8e:51:af:23:4a:0c:40:97:ed:45:5d:bb:11:d9:99:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:3F:85:86:EC:06:17:61:83:9B:14:5F:9A:45:51:E2:BA:DE:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8796f8f-0819-3957-82b2-7a41984a5dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b080::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:b6:5e:55:13:91:99:b4:3f:c7:c0:13:26:94:95:78:b6:
         fd:57:fe:63:ec:f2:18:89:23:bc:2a:62:10:36:41:8e:0f:af:
         57:f9:07:04:52:5b:ea:93:67:bc:48:d6:15:2a:5a:ca:9f:a7:
         ed:9c:ef:56:9c:fe:53:24:b2:a4:a3:b4:c7:78:48:ea:7c:d3:
         56:9b:f3:94:10:ff:fd:1d:a0:83:2d:b3:57:93:5c:5c:4a:fd:
         7c:f9:12:40:43:43:4b:a7:a7:58:a9:9c:83:e1:9f:3e:99:d8:
         3b:d4:f0:d9:c3:4e:ca:47:09:88:cb:19:69:56:73:2f:dc:e9:
         74:da:52:dc:1e:8a:39:58:0a:07:66:d0:81:1a:37:8f:0a:e6:
         6e:5f:bb:27:1c:56:0f:09:25:fe:c7:c5:10:fd:25:1d:a9:44:
         2f:63:df:56:ef:cd:b3:1e:05:70:c1:e3:f9:bc:55:2a:fa:40:
         99:0e:77:6c:71:a9:75:5e:e9:26:54:ee:55:f1:10:7a:db:53:
         75:ca:99:c4:86:5d:79:0f:d2:86:86:b7:86:4e:12:f7:5b:f0:
         76:bc:7b:a4:d7:70:b8:16:9f:0a:a3:4f:3a:0c:41:fc:3d:f3:
         dc:db:61:2f:af:ca:7c:dd:cc:e9:26:a0:0f:05:f1:f6:a5:b2:
         65:97:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:36 2025 by rpki-client