Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6a95cb-aa81-35e6-ae23-8d80e8ff93d4.roa
File:                     5c6a95cb-aa81-35e6-ae23-8d80e8ff93d4.roa (raw, json)
Hash identifier:          Gi5LrgfTsEep8ubfLQbZNQTTkFxkc460LOh7zSXxBE8=
Subject key identifier:   D0:5B:D8:83:EC:9D:BA:46:D7:B2:6F:22:EA:E7:BE:83:60:AD:F7:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D109F40A99E4FF7167E4680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6a95cb-aa81-35e6-ae23-8d80e8ff93d4.roa
Signing time:             Tue 22 Apr 2025 19:09:14 +0000
ROA not before:           Tue 22 Apr 2025 19:09:14 +0000
ROA not after:            Mon 21 Jul 2025 19:09:14 +0000
asID:                     6167
IP address blocks:        2600:1017:a412::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:9f:40:a9:9e:4f:f7:16:7e:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:14 2025 GMT
            Not After : Jul 21 19:09:14 2025 GMT
        Subject: CN=d51b7f71-eca7-4dc0-8aeb-d7547134e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:24:02:5f:54:b5:7d:f1:b4:05:f4:99:3c:
                    7e:85:08:28:31:fb:75:81:df:60:31:f3:66:d6:ac:
                    27:2b:bb:3e:cd:61:19:4e:bb:cc:9d:7c:37:2a:c5:
                    11:42:99:24:70:06:a7:69:ab:3f:78:da:f4:e0:00:
                    8b:e2:af:28:bc:2c:85:ac:06:49:c2:80:3d:33:05:
                    5c:45:9c:99:c8:e3:ba:57:c6:a7:87:5d:ce:6b:bd:
                    be:40:68:e2:c4:36:7a:89:76:39:e6:61:d7:6e:83:
                    3e:b9:aa:96:41:8f:2a:56:8e:a9:11:64:f9:f5:3b:
                    b4:1f:b3:dd:cf:81:28:dd:07:ea:77:22:b8:a2:e2:
                    4d:e2:0f:8f:12:d7:2e:cf:57:a5:af:91:1d:99:ba:
                    f3:9c:77:11:e3:e2:b1:25:17:f8:bc:eb:97:dd:f5:
                    16:27:62:c3:a0:bd:9d:fa:16:fe:d1:90:a0:d5:40:
                    bc:33:07:4f:55:25:75:9c:0a:f9:ab:ef:40:82:65:
                    72:43:86:21:26:99:da:09:e6:a6:81:42:57:0d:6d:
                    89:2e:85:21:55:d9:82:3e:8e:60:cb:d3:5e:86:9c:
                    b7:33:f9:ce:53:6c:19:dd:37:56:b6:aa:7f:b9:bd:
                    52:16:0a:75:43:ac:8a:d1:e2:91:69:ad:35:99:be:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5B:D8:83:EC:9D:BA:46:D7:B2:6F:22:EA:E7:BE:83:60:AD:F7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c6a95cb-aa81-35e6-ae23-8d80e8ff93d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a412::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:a8:96:35:43:46:50:c0:06:ce:a6:38:69:8f:48:2f:4a:
         9c:ea:c2:ca:1f:76:74:ab:fe:18:97:d8:8a:f2:c0:ee:03:a4:
         be:a4:81:81:58:f2:26:a2:02:08:3e:e6:cb:39:a2:ed:8c:62:
         b1:c9:87:8c:93:d1:f3:d3:da:17:8c:2e:d3:f9:9e:c1:69:f5:
         53:55:12:e6:ba:ac:8d:b0:24:fb:68:7c:9a:3c:5e:79:12:c9:
         06:0b:f0:67:79:bd:04:27:c8:b1:e0:c9:b1:bf:b8:63:d1:b5:
         4a:bd:31:7a:e7:6d:ab:47:0a:b2:6f:e6:20:54:ba:fc:e3:56:
         a3:8e:76:8b:1b:07:13:06:fa:81:76:81:b2:08:f6:3c:f7:af:
         64:28:7d:a2:b5:dd:c4:49:01:36:63:c0:6c:6d:94:44:50:61:
         2f:bb:2f:e8:31:fb:b4:91:f9:b9:55:8d:9c:49:95:5c:fd:9d:
         78:a2:51:6c:42:28:98:79:51:4a:d7:09:3d:6e:f5:88:cd:a4:
         f1:fc:78:bd:0a:0d:5b:2e:39:26:b0:be:13:dd:b8:e5:f6:a5:
         ba:19:bc:37:b0:88:91:80:d0:07:0b:bc:1a:62:0c:3f:e3:cc:
         56:96:db:5e:0a:6d:09:96:c2:7a:e5:92:b9:e5:24:56:35:75:
         85:98:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:53 2025 by rpki-client