Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd38cc4b-0ef8-3b2b-873a-2644c1021b5b.roa
File:                     fd38cc4b-0ef8-3b2b-873a-2644c1021b5b.roa (raw, json)
Hash identifier:          zkmrxu2MdiGl7BHit+31jEwN3byTClwNS07GG/ot0Vw=
Subject key identifier:   F3:85:A2:7D:53:7F:A4:F2:B5:3E:7E:BF:8D:F2:C8:E4:39:17:C8:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C63808F018E67B5E42592700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd38cc4b-0ef8-3b2b-873a-2644c1021b5b.roa
Signing time:             Tue 04 Feb 2025 20:09:51 +0000
ROA not before:           Tue 04 Feb 2025 20:09:51 +0000
ROA not after:            Mon 05 May 2025 19:09:51 +0000
asID:                     6167
IP address blocks:        2600:1013:a012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:38:08:f0:18:e6:7b:5e:42:59:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  4 20:09:51 2025 GMT
            Not After : May  5 19:09:51 2025 GMT
        Subject: CN=0f87f951-0a16-43d7-8f35-09345497554f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:c9:46:f9:cb:4e:09:d9:4f:be:50:74:83:
                    a4:a1:11:e1:c2:c9:00:92:a5:ea:8a:c2:8d:55:eb:
                    07:de:90:c3:ff:a4:19:2c:51:a2:d0:a1:57:31:7c:
                    a9:db:43:66:53:f6:92:99:3b:6a:83:72:d9:21:9e:
                    14:7f:4d:87:17:89:c2:e4:cd:c4:6c:ce:ce:83:67:
                    18:cf:b4:18:64:fc:ea:b0:db:b7:90:d5:d1:d6:be:
                    9c:1e:e6:45:ea:26:bc:5e:db:68:39:21:94:c4:23:
                    98:2e:68:77:e3:d9:3c:65:83:d3:e7:c8:26:d6:34:
                    8c:f6:b8:a6:5f:16:ee:cf:28:b1:b6:17:fe:d3:08:
                    9a:65:ba:4c:0c:da:3e:ad:2c:34:d8:2f:e2:c9:df:
                    26:32:81:79:60:d9:bd:f0:cd:31:ac:12:42:9a:33:
                    8e:a6:4f:a3:1b:19:1d:11:18:18:1a:c6:6a:d9:f0:
                    fa:61:37:47:eb:c2:9b:81:66:8f:97:98:00:21:79:
                    dc:c3:0a:c2:e4:eb:90:3c:46:11:3d:05:31:12:59:
                    fa:28:47:bf:24:0e:53:6f:a5:4b:c8:44:9b:bf:89:
                    19:8d:04:f2:ad:19:3b:30:0e:d0:af:a5:d2:74:40:
                    12:0b:29:9d:5d:d5:c0:1a:3b:e8:a6:6e:a0:86:ad:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:A2:7D:53:7F:A4:F2:B5:3E:7E:BF:8D:F2:C8:E4:39:17:C8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd38cc4b-0ef8-3b2b-873a-2644c1021b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1013:a012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:68:55:1e:6c:aa:7c:b6:68:c6:91:98:4c:a8:6e:d7:ea:60:
         8f:4c:55:6e:c2:f1:88:ef:02:44:95:39:29:4c:68:4e:7d:06:
         21:67:e3:a0:dc:8a:b2:9d:a2:85:3f:05:ad:60:ec:51:84:04:
         eb:ee:87:e4:57:4b:e4:36:07:0b:12:db:fb:b8:a9:47:4e:1d:
         d0:b8:0d:eb:f6:38:35:49:b7:6a:92:c8:87:bc:c6:de:2d:d2:
         0c:87:de:c0:e1:d3:97:96:e2:56:29:5c:63:40:db:0e:3c:61:
         7a:ba:b2:ff:9b:eb:fe:d4:ad:c3:91:bf:0d:8a:94:fb:f8:3a:
         d9:4e:d2:c1:d8:f1:92:cd:26:6d:a5:25:d5:3a:27:5d:f8:91:
         2a:39:99:56:1a:b2:6d:bc:af:fb:2f:50:c8:04:d2:58:47:df:
         81:2c:60:99:a3:1c:20:cb:5c:b5:5f:f0:d1:b5:30:01:5d:60:
         6f:3b:61:95:cd:03:49:b8:a3:a3:41:dd:7e:6b:4d:64:e5:a2:
         3f:22:b9:5c:18:22:59:10:5e:bb:40:0e:ff:a4:9b:6a:93:8a:
         6d:cd:f4:b3:cd:a5:08:34:55:8b:0c:f8:89:73:2d:0a:a1:c4:
         52:57:16:ab:aa:5f:3d:3e:f6:aa:f4:25:1e:d3:6e:0b:0c:56:
         82:1a:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:28 2025 by rpki-client