Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9dd90d-c4ab-30bb-9c77-92b2ef716952.roa
File:                     fb9dd90d-c4ab-30bb-9c77-92b2ef716952.roa (raw, json)
Hash identifier:          RCtufJJ1S8WXWO9M6Y0fISDW9QHD1NZwTaeUn1r3h9s=
Subject key identifier:   53:E6:DF:98:9C:DF:AC:90:F5:AC:ED:F5:92:0C:4E:AE:43:0D:C0:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2459CA34A5762AB4A49540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9dd90d-c4ab-30bb-9c77-92b2ef716952.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:59:ca:34:a5:76:2a:b4:a4:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d29f2bc3-6dc7-4976-88af-ebfc11cbeda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:40:09:dc:a7:a8:80:79:c6:58:3b:8a:02:
                    f5:97:a5:3a:09:8c:ef:37:6c:48:70:49:27:6b:13:
                    cd:35:4a:ee:6d:89:ac:e3:3e:e0:93:02:0b:aa:4a:
                    7b:e1:07:37:67:b2:03:ca:40:74:6d:dc:8f:d1:03:
                    25:84:de:ca:51:ca:6d:04:d2:f6:76:b7:69:83:1f:
                    1b:57:87:56:69:46:aa:15:1f:3f:14:f2:65:4b:88:
                    f7:48:cc:dd:65:5d:68:c0:aa:80:4b:ff:5a:c7:48:
                    b3:03:6d:ea:0f:fa:ac:30:72:b5:81:c0:ec:74:9e:
                    9b:ed:a9:2f:d8:08:10:a0:4f:b5:c2:d9:50:e9:dc:
                    be:8b:86:fd:48:3d:d5:76:d6:52:2a:52:91:70:09:
                    18:56:66:41:d0:ec:ef:2d:88:5c:2e:c3:d4:dd:6d:
                    9c:8f:89:04:77:47:36:18:3e:c2:20:62:fe:b3:45:
                    f8:84:01:32:48:d4:13:0c:9a:ac:fe:95:90:bb:c0:
                    b9:90:27:1e:60:6f:b2:a4:9a:fa:59:b2:12:47:7b:
                    6f:42:5c:f0:49:16:46:0d:13:6e:6a:84:bc:23:c3:
                    af:11:9c:b6:21:8d:bb:df:4b:fc:3c:1a:2b:52:61:
                    5a:57:b5:fa:d9:87:d3:60:3d:b9:9d:b8:07:41:8b:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E6:DF:98:9C:DF:AC:90:F5:AC:ED:F5:92:0C:4E:AE:43:0D:C0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9dd90d-c4ab-30bb-9c77-92b2ef716952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:0b:d6:ec:8c:f4:ea:58:6a:11:ab:61:9b:03:9f:a8:2e:
         d1:1f:74:06:63:5b:ae:3c:8d:28:20:31:24:f9:07:b0:6f:c8:
         d0:35:4f:0d:66:4d:58:e6:a6:f1:33:86:67:29:89:01:a3:42:
         63:d2:50:a3:04:8b:39:be:80:e1:ee:76:97:89:cd:c4:d8:11:
         4b:fe:43:06:18:9f:45:b1:ed:5e:39:af:26:a9:b5:4f:63:a2:
         9f:f3:9e:bb:05:30:5a:60:27:d6:86:5a:80:03:b3:d6:a1:af:
         f7:db:5a:5e:77:af:3a:88:22:e0:f1:4d:07:1c:f3:13:6a:c8:
         0f:68:57:8d:34:e2:4c:cd:fc:e7:92:cb:ea:41:3a:60:17:13:
         20:0c:27:57:c2:f8:62:c2:af:b0:32:94:af:f4:58:8c:c2:33:
         f5:23:18:cf:3c:4c:3a:9d:82:c0:b9:b3:3c:fb:fe:23:5b:74:
         be:b0:b7:77:0c:99:08:2d:b6:fe:07:53:41:ca:d6:da:93:d5:
         3e:5e:39:a9:a3:5f:c2:ac:00:3d:cf:3d:05:38:20:e2:6a:b6:
         e1:fb:58:7c:84:fd:cc:fb:14:6d:fe:2e:48:72:31:6a:76:63:
         5a:ba:ab:e5:1b:d6:ac:16:28:09:45:c0:52:ec:3c:f4:31:0a:
         d6:2f:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:59 2025 by rpki-client