Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa
File:                     fb0d467a-d8e5-3127-8587-61a576ea7462.roa (raw, json)
Hash identifier:          Rx7Lje+SD7G8zYyKcAyaHi1SqiVeIpomJHA3depy3gM=
Subject key identifier:   5E:F0:93:E6:EF:82:C8:13:A7:35:72:81:9B:82:AE:D5:41:0F:C9:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EC96AA42F3683BCC64B5B740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100f:b1e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:aa:42:f3:68:3b:cc:64:b5:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=0c12b582-372b-463a-ab88-c88f2377fb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d5:68:d6:c7:20:e8:cc:22:3d:3e:c6:f1:8b:
                    cc:cb:a3:48:38:63:6f:b2:8d:10:5d:a5:6c:72:50:
                    ad:f4:29:6e:c1:2e:64:bb:f1:b6:e1:31:cb:4e:d3:
                    8c:a3:d0:7f:ed:3a:cc:e9:a5:8d:64:d0:be:7d:7a:
                    3f:a1:29:b0:74:c0:03:2a:ce:d9:44:f0:af:d4:92:
                    d2:c4:35:d1:df:ab:b8:f4:95:08:91:99:dd:ef:45:
                    d6:73:8f:72:8c:c2:d5:27:6d:d9:c3:9b:c4:7c:b2:
                    bd:60:2d:b0:d3:98:a4:9b:da:a2:b7:0d:45:cf:86:
                    d0:10:d1:b1:fc:f7:0b:f2:63:c1:7a:2a:f9:50:d2:
                    b7:13:ea:f3:0b:a0:2f:0b:fd:18:11:13:f6:39:ac:
                    bb:68:d9:eb:19:7f:18:db:ba:92:f7:6d:a7:a0:f7:
                    14:22:09:1a:02:cb:fc:05:9d:91:21:17:6c:d9:d1:
                    bd:e6:50:3e:1a:30:3a:db:d8:7a:c4:7e:00:03:8f:
                    ca:e2:bc:e0:2a:7f:28:1a:4e:76:c2:8a:37:b4:81:
                    67:a2:7e:4a:17:66:f2:08:d2:ee:b6:a2:be:45:74:
                    1e:f7:38:44:33:2c:62:2a:4d:31:86:9b:60:69:59:
                    eb:0d:d4:49:eb:2d:27:81:d0:06:3b:42:9d:76:3e:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:93:E6:EF:82:C8:13:A7:35:72:81:9B:82:AE:D5:41:0F:C9:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb0d467a-d8e5-3127-8587-61a576ea7462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:dd:19:f8:f8:79:5f:60:b8:51:91:b6:6b:7d:7b:42:e5:
         42:26:d8:5c:f8:67:5e:d8:66:f9:fb:88:a7:b7:6d:8f:bf:c1:
         4f:33:cb:a7:e4:ed:96:6c:34:f4:8e:79:4e:bf:03:ca:8b:ae:
         9c:40:43:04:99:66:fd:bc:90:32:ae:48:d7:c5:a0:ca:9f:34:
         7d:6f:18:9c:e7:2e:97:69:fb:d3:0a:b2:d9:b4:84:77:7e:af:
         db:18:21:0d:04:b7:ec:8a:92:83:61:db:a4:be:0f:f3:b0:c0:
         00:36:de:0e:d2:67:a4:19:32:2e:c1:f0:be:72:3c:2f:64:c3:
         1f:03:95:d2:cb:43:11:c1:3a:53:5e:3e:ce:01:c3:8c:07:22:
         14:d5:f8:64:c2:7f:56:01:52:8f:50:79:3f:5e:60:10:c6:04:
         87:2c:32:64:10:33:51:af:0c:0f:fb:59:70:46:44:10:b5:e1:
         62:b4:e3:2c:55:31:90:3d:d5:1a:d9:a9:3d:55:6f:55:9d:4c:
         96:81:74:27:8f:67:ad:c3:07:93:23:e3:94:85:26:60:a5:25:
         9c:94:54:33:1d:50:34:2f:41:fa:b7:bb:6f:06:2b:14:e1:46:
         b4:4e:91:ca:73:48:e2:83:d8:0f:3b:df:40:1c:f3:ec:ce:87:
         72:f3:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:21 2025 by rpki-client