Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa
File:                     fd64e123-9760-309c-a904-b0c881a21988.roa (raw, json)
Hash identifier:          rFWjSlYOKpdgM0iq9NASAHyVtpUjLTdqD2cPISvUXZA=
Subject key identifier:   0A:E1:DC:EE:78:A3:B4:1F:70:CD:E8:DF:50:32:61:16:D2:91:10:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2488865EFC870BA9955EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:88:86:5e:fc:87:0b:a9:95:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1d0f3543-564a-4b12-ab56-e1dc26851304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:08:ed:85:da:4f:3f:11:28:e9:00:44:38:
                    ca:a1:78:6b:c5:65:7f:d0:10:06:cb:35:cd:54:70:
                    7b:32:c7:f2:b3:0f:5f:af:a2:67:9a:f6:2d:e4:ac:
                    31:12:77:5a:4e:55:e5:41:75:1e:81:45:1f:b8:86:
                    5d:6e:8a:6b:ec:f8:01:25:e5:73:2d:e9:fa:ad:34:
                    18:d9:d6:d5:6a:58:11:7b:04:00:d9:ee:06:4d:1f:
                    ca:d3:35:ae:98:07:ba:67:00:29:38:c9:7a:2a:30:
                    03:22:00:66:67:be:c0:00:fc:05:41:2e:31:b3:ad:
                    f8:fa:fa:ec:14:09:7c:ea:76:bf:ac:2a:0a:64:7b:
                    6c:26:6b:52:d7:2e:bf:0c:7b:40:e9:7a:87:32:bb:
                    9d:77:ce:72:f6:c8:97:c9:d5:b9:6a:14:fd:9d:90:
                    81:78:8a:75:78:ca:91:38:f4:64:a3:4b:1e:a0:c2:
                    18:48:b4:91:6a:45:47:09:a6:35:ac:fd:74:16:22:
                    a8:d1:50:f2:db:1f:16:f0:e9:09:82:84:4a:31:d1:
                    cf:7c:4a:1e:57:92:11:d8:ec:ea:f3:0d:7c:2b:e0:
                    08:ed:d1:58:c8:8a:af:14:62:88:86:ac:25:19:3b:
                    72:68:6e:1f:5a:b6:59:09:61:71:de:61:95:62:b9:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:DC:EE:78:A3:B4:1F:70:CD:E8:DF:50:32:61:16:D2:91:10:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd64e123-9760-309c-a904-b0c881a21988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:54:2c:ec:ff:e4:96:54:41:9a:9d:4c:9d:79:0b:eb:51:
         03:f2:f7:24:97:31:b6:af:72:0e:71:b3:ca:f5:f4:c2:3e:b1:
         ac:e8:2a:cd:70:b3:d5:fe:14:9a:cd:4d:04:24:82:2e:a2:7c:
         ad:a5:a0:29:83:7d:36:6e:f4:54:a4:ca:9b:ba:1e:83:30:98:
         3c:c4:e5:16:c0:aa:e0:ec:8a:d2:e8:bf:f1:2f:9f:85:94:1f:
         ba:2d:de:90:80:0f:13:ac:df:dc:88:be:08:68:07:82:9b:43:
         5f:ad:8f:38:01:a5:66:20:44:dd:26:51:32:8e:ea:d7:17:74:
         98:b2:2e:67:9e:d2:39:9f:40:9f:a1:a7:67:44:9c:a6:be:02:
         4b:12:08:b6:54:aa:3d:6c:c9:90:00:16:85:09:9e:db:7b:95:
         ff:9a:b6:3f:d7:cf:20:c9:e9:c8:10:78:44:91:c7:9d:e9:24:
         87:72:34:e3:cb:26:ce:60:eb:bd:7a:0a:f4:da:3c:8e:53:ae:
         94:20:1b:80:46:51:83:1b:0c:0f:39:83:5b:f9:ac:c2:45:bc:
         19:18:8c:52:04:19:7b:52:c6:91:80:38:21:b4:71:49:a4:b4:
         fc:2a:70:99:c0:25:f1:34:d8:43:61:6a:3f:c7:ed:58:8e:98:
         62:48:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:58 2025 by rpki-client