Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa
File:                     2acdfa14-166e-39d8-97bc-f81b43f29528.roa (raw, json)
Hash identifier:          VBXWMEtAjalAxaRiu9SpsraY19Prupz3yfSH8zu0Ta8=
Subject key identifier:   5A:6F:16:D2:C7:4D:08:16:C2:C1:D5:8C:8C:05:44:85:FB:64:84:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D108418C39094FA70B35200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa
Signing time:             Tue 22 Apr 2025 19:09:01 +0000
ROA not before:           Tue 22 Apr 2025 19:09:01 +0000
ROA not after:            Mon 21 Jul 2025 19:09:01 +0000
asID:                     6167
IP address blocks:        2600:1003:a418::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:84:18:c3:90:94:fa:70:b3:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:01 2025 GMT
            Not After : Jul 21 19:09:01 2025 GMT
        Subject: CN=847adbe3-17c6-41d3-a9ef-6d0e81b8e696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:55:60:3b:2c:20:40:7d:c3:6e:db:54:ab:
                    ea:c5:2c:ec:e2:19:1d:92:99:c2:07:d3:d4:76:cc:
                    82:37:7d:a9:38:bd:81:da:9e:86:fe:b1:d8:b6:04:
                    7b:86:63:34:69:40:6b:d9:56:e0:aa:c9:b6:b1:4d:
                    18:c3:da:07:7e:e0:9c:a7:3e:58:52:f9:34:8a:28:
                    98:35:e9:f2:60:2f:7d:f9:53:66:85:88:4a:66:e0:
                    a6:aa:01:ba:b7:6a:33:e9:e5:ac:8b:b8:43:7d:24:
                    80:a2:62:5a:51:53:67:62:f0:85:5c:4b:94:73:72:
                    79:b7:eb:6a:2a:b4:d2:68:4a:19:44:d0:12:23:52:
                    db:e7:56:70:83:2b:a4:d4:5b:3f:33:87:b2:81:8d:
                    11:09:4b:5e:75:ec:41:14:19:f2:9d:55:93:be:d7:
                    99:2d:f2:5d:19:52:97:e6:36:5f:77:25:ec:f7:97:
                    71:72:3c:8e:c9:83:5a:08:4b:a3:9f:a7:8b:14:8f:
                    f0:07:62:46:2a:cc:b1:f8:2c:ce:c3:67:9b:e0:8a:
                    91:25:e8:b8:2d:67:24:e6:4e:67:22:2f:9f:32:ff:
                    95:73:ca:33:f3:47:7e:4e:f2:3f:f3:e4:4f:41:ab:
                    f6:d0:a3:79:71:17:fb:ce:9d:c3:03:23:6c:5f:ca:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6F:16:D2:C7:4D:08:16:C2:C1:D5:8C:8C:05:44:85:FB:64:84:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2acdfa14-166e-39d8-97bc-f81b43f29528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a418::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:86:54:5f:24:85:9c:e3:85:9d:34:18:8f:93:b0:9e:85:
         56:47:57:f1:15:86:c1:c6:da:16:3e:0c:be:d5:f1:c4:62:26:
         ea:48:87:b7:12:ee:c2:fa:2e:16:35:49:bb:71:50:e3:5e:14:
         f5:e8:70:9a:0d:04:31:5c:44:35:05:86:77:a3:dc:d2:52:9b:
         6a:cd:9a:9d:eb:18:bc:a8:0b:ae:e5:62:1c:24:95:39:c2:28:
         36:4c:1d:c4:3c:0c:ce:6c:1d:10:c0:ab:ec:f7:54:9a:25:e2:
         ff:17:5a:d2:1f:24:1e:e1:4c:37:20:00:03:31:40:f0:af:49:
         eb:cb:e5:ba:23:c1:d0:49:a4:a6:25:f7:53:94:44:46:b2:ab:
         06:45:dc:12:c1:54:f9:e1:84:fa:53:f3:24:fd:b1:8c:a1:01:
         97:3c:46:92:c7:25:4b:fd:c8:cf:8d:2c:c3:9e:a9:d6:0c:79:
         ee:27:bb:ee:b5:48:4f:ca:89:65:2a:b7:3b:e3:48:02:ac:a9:
         4e:b9:4e:94:b4:40:f6:6d:3a:b4:c5:ae:66:6b:93:5f:47:4f:
         23:66:38:4a:63:45:8d:64:7f:66:18:83:f1:da:1b:5a:ec:28:
         b5:f2:78:3c:f1:ad:27:32:d9:f0:af:5d:a1:b8:61:cb:50:f2:
         94:0d:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:08 2025 by rpki-client