Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa
File:                     311c3121-2a31-3d6e-b483-4aa8de0040da.roa (raw, json)
Hash identifier:          cP7ySKRBKqX+RXAZM2mCqErLKQMV1h//BQsynjrNJIA=
Subject key identifier:   F6:0D:6D:10:91:46:06:30:C9:43:12:0C:D7:BA:D8:A5:52:A7:22:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A02E959711A38DB2D0860
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:02:e9:59:71:1a:38:db:2d:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=865ee954-efaa-41c4-9c9b-dba5b8495f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:e7:eb:8c:51:81:28:14:4f:2c:73:e9:9d:
                    45:f9:44:2d:41:f6:26:4c:5c:7e:3d:34:02:dd:2f:
                    8d:4f:2c:94:68:41:46:7b:cf:f2:78:85:d5:5c:11:
                    1c:49:23:7e:0e:67:95:df:23:34:58:9b:92:0a:03:
                    ec:1f:9b:2e:03:10:34:0c:09:76:02:08:65:9e:c0:
                    59:33:7f:10:1b:27:7b:75:fd:fa:33:fc:21:8f:bb:
                    d0:45:44:e5:ac:2c:2a:08:bc:45:ba:a9:de:9b:2b:
                    8f:8e:97:af:51:43:a2:59:9e:b5:9f:fd:e4:41:50:
                    a7:1f:26:85:68:e6:02:b4:db:41:ef:79:73:6c:81:
                    08:62:73:ec:22:09:b6:e1:84:f0:30:2f:ce:da:87:
                    38:d2:10:9f:c9:de:bc:a1:5e:85:2e:f3:0a:6e:77:
                    17:d2:ae:06:be:88:3e:40:6e:cc:03:74:66:7a:c0:
                    b9:f1:cd:b9:d0:0e:f5:cb:47:b7:d6:be:0c:7b:a1:
                    9a:74:97:e4:0d:81:a7:bc:e6:6f:41:31:5e:83:cd:
                    c9:48:76:e4:72:61:89:2a:00:25:a9:1c:5a:e3:ba:
                    9b:2f:36:b0:da:a9:72:62:8b:94:5b:0d:cd:17:eb:
                    cc:4f:05:17:88:48:91:3e:f6:c2:61:6e:05:12:9a:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:6D:10:91:46:06:30:C9:43:12:0C:D7:BA:D8:A5:52:A7:22:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:90:da:bd:c3:5a:44:61:be:83:b6:c3:be:33:0c:a4:15:
         67:5d:1d:c0:8b:9e:5e:28:fc:57:07:57:3b:a3:b5:b9:e3:dc:
         e5:75:d2:82:2c:29:75:9d:13:b7:3d:30:fb:e4:5b:05:2d:50:
         6e:22:f8:04:c2:30:3d:94:d5:db:36:be:79:13:08:e7:24:85:
         5b:58:77:e0:da:e4:d6:57:b0:88:f5:32:73:fb:e0:b3:1a:72:
         25:8f:e7:9f:7e:bd:67:3f:19:5e:ae:01:51:86:a9:ed:89:38:
         4f:51:d3:0e:fe:25:d8:bd:2a:08:f6:33:72:41:09:5f:70:e3:
         57:cc:48:21:28:f3:db:39:29:e0:e9:98:6f:8c:69:3c:40:4f:
         d0:d2:aa:d6:f0:a9:1a:73:70:55:8c:ec:42:73:f2:2b:87:f7:
         55:51:55:87:5a:75:f1:e3:d4:8d:33:60:e0:d5:03:34:35:4c:
         59:1b:7d:ee:01:a9:70:53:22:04:64:99:01:65:5e:f4:69:82:
         70:6d:b3:0a:4b:55:fa:1b:47:6b:40:72:f9:a9:e7:11:ad:87:
         17:11:dd:5f:e2:b9:70:1a:3d:16:a3:54:90:f8:97:7f:54:32:
         1d:eb:05:c5:27:f1:a8:46:1b:cb:cb:4f:14:7f:34:bc:ef:d9:
         4b:28:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:53 2025 by rpki-client