Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2192cd3c-5260-333c-8f32-125557f31547.roa
File:                     2192cd3c-5260-333c-8f32-125557f31547.roa (raw, json)
Hash identifier:          B8UfbeSoum1xKlJifle8SNQRUM/hJMMkO4CIU9F3pG4=
Subject key identifier:   A3:1F:76:E7:BA:32:AA:51:FA:3B:0F:B1:94:F4:6C:1D:D2:8E:69:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2481F6F3113D13BC2E5880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2192cd3c-5260-333c-8f32-125557f31547.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:b0fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:81:f6:f3:11:3d:13:bc:2e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=91438574-1f0c-4bfc-905d-29c3c5464666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:35:ee:76:40:9b:1a:8b:4c:4f:7c:4f:f2:
                    58:4a:6b:71:4e:bc:97:a7:93:7d:81:a5:6b:4d:51:
                    ab:a9:20:8d:7d:50:47:89:be:02:a7:76:5c:2e:19:
                    d5:71:5b:19:06:92:44:af:a5:65:00:28:44:2d:35:
                    57:9e:7a:c8:e8:b5:6a:e9:c7:ce:5d:bf:7a:33:f0:
                    7e:c4:ae:61:14:27:d2:2c:39:4a:9e:ec:ee:2a:fe:
                    49:a3:aa:cc:d6:ec:28:69:c8:79:37:06:cd:4d:1a:
                    63:cc:fc:28:25:e4:a5:da:87:52:7b:f1:d5:ac:ec:
                    b7:b4:ec:2d:c6:0a:1a:eb:b0:13:6b:32:e3:d5:2b:
                    4e:dc:22:ce:8d:84:ce:27:e5:67:ab:09:40:5d:47:
                    c2:1d:37:89:29:a8:2f:fd:1c:49:63:42:0f:a7:da:
                    01:da:14:c1:1d:bc:36:b1:56:ea:d9:9f:3d:3a:6e:
                    15:9e:09:63:63:3b:a0:61:6e:cb:1c:bf:8d:ea:88:
                    52:a7:ed:1f:4c:08:84:ba:da:c6:64:b8:ea:78:01:
                    50:c8:19:da:fd:d5:81:08:b4:8f:e3:05:d5:61:4f:
                    48:8a:73:64:03:90:28:a5:47:1e:85:b3:dd:73:fc:
                    aa:39:28:0a:ef:6d:3d:0e:c8:53:87:40:14:3d:47:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:76:E7:BA:32:AA:51:FA:3B:0F:B1:94:F4:6C:1D:D2:8E:69:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2192cd3c-5260-333c-8f32-125557f31547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:b3:df:4b:b4:f4:b7:47:16:78:f7:96:7d:09:cf:c3:f7:
         f3:e9:78:24:95:48:77:64:a3:d7:4c:64:b4:f7:b4:f0:b5:fa:
         06:a0:47:00:4a:04:db:38:18:04:5c:08:03:e7:69:1b:e7:92:
         54:1f:bb:2e:4e:2c:06:f1:9a:57:e0:fe:d9:26:d3:5c:e5:18:
         a0:f6:57:07:c0:b6:10:fb:79:cd:29:80:36:ef:fa:b9:90:94:
         58:c1:2d:7e:b3:1d:9d:15:8a:5c:68:d7:6c:4e:29:88:89:41:
         06:ab:88:1e:d1:32:81:1d:e7:9b:b7:57:9d:bb:92:9b:99:b0:
         da:11:fc:c6:29:d3:02:f0:c3:fc:08:26:79:54:17:83:d1:f2:
         4d:32:61:cf:29:b3:a5:cc:30:ca:18:a2:c0:28:ee:2e:11:3c:
         ab:5d:be:84:75:ad:a3:98:ed:c6:e1:ea:fa:0f:16:a2:2d:23:
         53:4d:5d:31:20:cd:22:d5:b0:80:9c:a2:7c:34:d1:b0:e2:db:
         4f:de:34:8e:78:9f:2e:f4:0d:23:44:17:e8:89:f3:92:c1:5e:
         92:99:e9:50:cd:13:b7:8a:ce:5d:4d:da:3a:13:9b:71:75:13:
         03:d7:0d:b7:af:9d:d5:dd:c0:ba:ff:83:78:89:47:3c:8b:ee:
         eb:c6:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:55 2025 by rpki-client