Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09ca85f2-b859-3976-a93c-8afae2c3ee96.roa
File:                     09ca85f2-b859-3976-a93c-8afae2c3ee96.roa (raw, json)
Hash identifier:          xUIqzNu5dnH0JzH8fRs21JyaxIx0BJp72Va99Cxysoo=
Subject key identifier:   0C:4E:F3:75:60:C7:98:A9:40:18:46:F1:57:2A:DA:E9:CA:4E:E0:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A022FFACAC1E102CCBE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09ca85f2-b859-3976-a93c-8afae2c3ee96.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:02:2f:fa:ca:c1:e1:02:cc:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=11e7f1a9-b00a-4ff8-9b9c-e9ae168811a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:01:0c:45:1a:32:7a:7a:57:50:99:d4:09:
                    54:15:72:5e:b0:09:1d:56:c7:36:76:49:57:c0:de:
                    42:48:51:dc:89:5e:29:af:f7:5a:a4:c7:4a:27:cb:
                    07:02:ca:0f:2e:77:ff:50:b6:2c:e8:40:3e:f6:6d:
                    a7:32:6b:e7:28:52:d5:da:c5:d5:e9:c9:26:6e:40:
                    32:bf:e2:ed:03:b5:1e:35:75:8e:69:c0:5c:eb:25:
                    d5:5b:5e:09:8e:92:8e:ed:36:fa:23:fd:e4:dc:d3:
                    ba:81:9f:33:5f:07:fb:6c:2f:48:fd:91:6c:d2:46:
                    b0:52:7e:47:18:75:22:7c:90:76:b6:69:4d:33:32:
                    83:9c:c2:5d:f7:d8:16:43:98:ae:53:15:8f:9a:41:
                    dd:d5:e4:d3:d8:83:38:6c:41:dd:8b:46:a9:78:6d:
                    20:17:01:00:16:91:92:97:0a:48:12:d3:37:a2:b2:
                    46:d1:62:be:00:f4:cf:78:00:d6:c3:ba:6d:9f:6b:
                    6e:dd:b9:26:76:be:1b:5a:c1:fd:4e:8f:88:58:32:
                    63:c4:91:7a:60:10:58:16:c8:3f:2a:12:84:1c:62:
                    cc:21:c8:f3:72:b2:d4:86:aa:28:ca:03:69:8e:02:
                    00:88:0c:4d:36:f7:01:7a:f1:3f:08:ad:7e:bb:ae:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:F3:75:60:C7:98:A9:40:18:46:F1:57:2A:DA:E9:CA:4E:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09ca85f2-b859-3976-a93c-8afae2c3ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:18:15:c0:f6:d3:16:29:14:31:6a:0f:a7:17:9a:a1:a2:61:
         b7:f6:18:41:78:3e:47:46:fa:39:bf:86:7b:a9:70:02:33:88:
         68:97:9e:b1:67:05:cc:19:75:f0:1a:01:90:60:5c:d8:17:19:
         3d:70:6b:ba:b9:d0:f6:84:fe:52:bb:41:a2:bb:14:d2:93:02:
         54:8e:fe:c7:53:b0:0b:f2:3f:39:d0:02:4d:08:67:d8:a9:7e:
         3d:19:2d:6b:64:3f:ed:d6:ea:8c:4f:c8:44:39:88:ab:a2:a6:
         f4:f3:c3:60:a5:43:0e:f9:03:41:55:de:95:f8:25:15:90:67:
         61:f4:79:e4:67:42:f8:82:1d:3d:98:10:22:70:07:78:44:4e:
         ee:da:14:4a:88:0d:cf:dd:d8:ae:68:05:9d:06:42:78:28:48:
         49:33:74:ba:39:8d:6b:5c:42:29:75:4b:46:ff:a7:dd:6a:7d:
         05:2e:35:9c:3a:7c:09:d3:54:86:54:26:65:0d:ec:48:bd:72:
         0e:02:5d:7c:ee:52:ae:40:eb:c5:56:c4:15:70:a6:f0:ca:f8:
         a7:97:15:74:67:2c:66:7b:a4:b5:c5:1b:62:b2:e0:58:ba:6d:
         47:73:b2:6a:82:00:f7:01:0f:fd:df:37:4f:81:6c:2a:fc:85:
         60:c6:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:08:11 2025 by rpki-client