Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe2454bb-ba66-35aa-9e26-16dace703ade.roa
File:                     fe2454bb-ba66-35aa-9e26-16dace703ade.roa (raw, json)
Hash identifier:          ZS0d/6THqGA4t3/g8By+gutrELka4Sbx0yiyzZaf7Nk=
Subject key identifier:   E8:3B:8D:E1:B3:10:5A:43:DC:6C:53:85:EC:4A:90:D7:77:7F:D2:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D617E3916D14B10B46A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe2454bb-ba66-35aa-9e26-16dace703ade.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100e:f110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d6:17:e3:91:6d:14:b1:0b:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=4e877768-8d31-41a3-a2e0-04fbd755e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:2d:00:94:bd:13:a6:66:a4:e5:8d:86:9f:
                    ff:a9:d1:94:0e:62:ef:89:74:dc:49:f0:91:71:07:
                    d3:e8:5e:74:98:25:e1:15:1f:b1:66:00:32:7e:0f:
                    12:63:cb:2c:7a:73:13:71:8a:77:a0:f4:3b:7a:11:
                    63:a3:b9:00:2e:16:9f:37:3d:17:b7:f1:54:06:1b:
                    9e:1b:b3:13:53:f0:44:cb:e2:b6:e7:f9:e9:df:c7:
                    83:0f:09:e4:82:62:bf:07:69:ce:b9:88:73:cf:78:
                    34:eb:91:83:31:a9:9e:6d:ad:95:79:b2:af:ae:d3:
                    62:cf:1d:5a:4d:61:4f:8d:05:d1:25:f6:0a:76:2d:
                    75:26:78:15:1d:34:0b:03:90:af:cd:3a:e2:65:68:
                    d4:81:7a:9c:e4:b3:57:66:82:66:78:50:c1:00:cd:
                    11:28:f3:27:37:c3:e2:8f:36:a2:7c:69:5b:2e:07:
                    1b:bd:64:9a:fe:12:f5:0c:00:99:7b:da:e4:97:72:
                    11:10:8b:7e:e5:58:e2:2a:6c:96:96:6f:f1:ff:6f:
                    0d:d1:63:78:75:7d:fd:b0:70:a3:01:28:f3:3b:6f:
                    23:2f:7a:4a:87:8b:46:78:66:91:c2:f7:57:9c:f1:
                    dc:36:6c:1b:50:ec:71:74:da:e7:33:e1:d1:12:e7:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:8D:E1:B3:10:5A:43:DC:6C:53:85:EC:4A:90:D7:77:7F:D2:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe2454bb-ba66-35aa-9e26-16dace703ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:f110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:30:d7:6b:a7:c8:31:df:f8:90:04:46:8f:f9:06:94:c4:c3:
         33:6f:2e:bb:19:8b:98:b5:bf:3d:d1:b2:75:a6:09:47:89:f4:
         2f:a0:67:02:a6:85:78:35:b2:d3:6b:02:a1:89:23:a7:eb:ca:
         a9:84:6c:2b:7c:a2:ef:44:30:7c:ab:5f:cf:1a:6d:b7:fc:2d:
         34:b3:ea:4b:d9:0a:f8:b7:9d:2c:de:14:00:e7:5e:4c:b6:5f:
         82:65:a9:7a:54:35:19:0a:89:f2:82:27:38:50:c6:e4:77:4d:
         3f:d8:d7:33:a4:19:bb:3f:53:c0:50:13:31:16:21:f4:fd:60:
         08:0c:d4:84:5f:ee:67:fb:64:b9:85:e2:29:56:91:da:a9:44:
         66:32:d3:20:81:45:32:ad:a7:da:98:d0:02:53:44:3b:05:e7:
         af:a2:38:66:2c:52:4a:e9:68:00:6d:85:43:ba:f1:98:f9:6a:
         eb:d6:4d:d8:bb:47:af:53:f6:f2:81:50:28:b7:39:b8:b5:2d:
         a3:84:d2:69:d7:8d:23:58:9f:66:d6:14:de:b3:a4:32:35:ef:
         18:78:d2:4b:e4:78:77:79:2c:b7:9a:5d:af:09:de:b1:f2:b9:
         b7:42:cf:d9:15:d7:35:69:f9:cf:a6:d4:fc:77:cd:a6:86:30:
         8b:3b:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:59 2025 by rpki-client