Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa
File:                     f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa (raw, json)
Hash identifier:          fkkG24ZcH7AsQJhb00cDUEzA1v2u2ME+u3ZNXwnyxTo=
Subject key identifier:   2F:34:1B:77:57:B1:23:6C:CD:69:74:F7:0D:65:E5:6D:07:2D:4C:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2457A596BC74EE51B74FA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1002:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:57:a5:96:bc:74:ee:51:b7:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=52e0a52a-cc5f-4432-9f79-1f7f269880fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:b0:c2:4b:da:30:28:0f:61:30:ef:60:84:
                    cb:fb:08:27:3f:3a:9a:3f:47:4e:5d:63:85:c4:16:
                    a2:ab:f7:e0:27:2f:4e:2d:cf:a5:b8:4a:1b:54:1d:
                    bd:7e:20:8c:e3:8b:57:ed:ab:af:82:5a:c1:1f:7d:
                    42:61:7e:4c:00:5a:bc:88:4b:3a:41:00:1f:6f:55:
                    8f:a0:9a:45:83:75:ae:3f:74:f7:8a:b3:93:b0:5f:
                    28:8f:c5:ee:74:80:45:15:95:a4:6e:b8:c8:90:01:
                    fe:72:8d:a8:bc:ec:c1:f0:39:ed:61:96:43:2d:7b:
                    38:9c:d7:e8:b9:a0:3b:56:a0:36:fc:41:fc:a1:1b:
                    3c:62:54:19:73:98:38:40:e3:b2:67:4e:dc:df:ab:
                    ec:f3:93:f6:e3:1c:70:77:3c:54:5b:8d:7f:2b:00:
                    fa:2a:50:c1:6e:4a:f5:39:cf:2f:91:5a:a0:40:f9:
                    5e:45:70:29:dc:c3:e6:f0:d8:69:a3:ea:d6:18:e1:
                    08:1f:f8:db:0e:9e:60:4c:a3:0b:ec:38:c6:3f:20:
                    23:6a:2c:e6:10:1c:02:3a:6d:59:fc:c9:11:e9:89:
                    74:7c:98:7e:58:b3:57:26:5d:b1:bc:d3:e1:7d:9f:
                    12:b9:7b:98:78:a0:61:f4:b0:5e:61:9b:50:48:24:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:34:1B:77:57:B1:23:6C:CD:69:74:F7:0D:65:E5:6D:07:2D:4C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:ff:52:f1:ac:10:2b:7c:02:df:34:a0:79:e4:59:14:9f:
         80:d7:74:2d:91:cd:07:92:97:83:b4:36:c3:c8:bc:74:8e:64:
         d8:97:00:a9:e0:47:fc:81:c4:d5:3d:92:0c:8c:24:45:84:bc:
         8b:b3:27:ea:b7:9a:a9:7e:dd:e8:12:34:12:ff:cf:38:43:3a:
         6f:68:55:14:d8:b6:ef:41:0f:24:db:ac:c3:63:94:30:0e:a7:
         7f:e1:35:4c:21:48:fe:ef:3d:a9:9a:5a:5c:89:aa:92:01:7a:
         f5:66:2b:cc:90:37:df:7e:44:ae:33:01:76:cd:bb:cf:29:4d:
         76:db:5c:85:0c:83:39:61:58:f8:f0:1a:f9:c5:0e:06:f4:a6:
         93:95:09:c9:01:f4:d0:45:54:64:7d:0b:4e:24:48:b2:c7:0d:
         75:6c:f3:39:76:9b:6b:8b:97:93:d3:22:45:82:c9:a2:f9:27:
         ef:95:5d:9b:d7:c7:7c:72:05:f2:af:65:b7:ad:c3:7d:c4:7b:
         fd:cb:a8:2a:d5:a3:e0:70:89:b5:a5:61:d1:1a:49:c1:10:fe:
         bb:df:14:b6:37:ca:0c:49:6a:00:45:fd:66:34:2a:c4:e6:e4:
         01:74:74:07:e0:45:10:cc:22:d7:84:7c:27:82:f7:d0:d0:a3:
         49:a9:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:28 2025 by rpki-client