Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/76d27878-8942-3e23-a07c-e29aca71e2ed.roa
File:                     76d27878-8942-3e23-a07c-e29aca71e2ed.roa (raw, json)
Hash identifier:          PHEIpMSg3xa7txIaIycxUftocBEJ1WdUP/Rk81xDHAk=
Subject key identifier:   A0:05:EB:89:F8:18:3C:21:4A:31:13:C5:36:0F:DA:26:FE:2D:A7:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498769D1F6412C34F054229C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/76d27878-8942-3e23-a07c-e29aca71e2ed.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        2600:1011:a18a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:d1:f6:41:2c:34:f0:54:22:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=5cc48378-cf02-4664-90d0-e416c57cb760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:d2:9e:bd:38:43:7f:0c:02:37:fc:ae:e0:
                    ac:3f:92:87:5b:c5:33:db:8e:1d:45:ad:48:bf:c1:
                    4f:2d:61:22:9d:d4:7e:ef:11:73:e9:71:f2:0b:88:
                    46:03:be:15:27:2d:5b:7e:bc:65:84:21:8d:4a:85:
                    8a:90:5b:8d:20:bc:20:27:90:09:f8:38:0f:77:2f:
                    29:e1:4c:8e:49:c9:64:96:fa:3a:10:ef:cb:b8:f1:
                    5f:45:a5:02:30:bb:a0:d5:66:1c:41:da:27:20:68:
                    26:4b:b7:3c:77:d9:ff:5e:17:98:42:8d:c7:65:e9:
                    b7:16:8e:09:19:b5:1c:94:65:70:4c:d6:24:15:09:
                    9e:09:8d:8c:c9:15:03:b7:71:1d:73:09:eb:3b:64:
                    e3:2f:b9:e2:d0:21:9c:61:a7:e2:e2:24:01:c7:f0:
                    31:a3:1b:ba:18:b6:95:87:4f:70:86:5c:e5:70:ec:
                    00:91:fe:4e:50:f1:d7:63:ae:5e:74:97:bf:1f:fa:
                    cc:16:03:3c:2d:b4:50:66:e6:84:ed:68:9b:4d:64:
                    b6:3e:06:78:e1:e5:f8:6a:c7:e0:85:ba:01:67:b7:
                    22:1a:dd:e9:57:9c:2a:f2:45:51:f0:0f:e9:06:7d:
                    dc:f5:f6:5d:ef:26:4c:33:88:0a:ff:89:14:18:c3:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:05:EB:89:F8:18:3C:21:4A:31:13:C5:36:0F:DA:26:FE:2D:A7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/76d27878-8942-3e23-a07c-e29aca71e2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a18a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:80:17:e4:3e:a6:cb:ce:8d:35:eb:73:5d:e8:3e:a6:88:a6:
         0f:bc:f8:e2:f0:78:cd:d5:1f:10:ce:7c:aa:fb:e3:7d:6f:df:
         48:31:a0:18:9b:cd:61:5b:6f:19:b9:a2:8c:7b:0e:17:91:35:
         6d:a0:c4:26:0b:7f:03:6f:eb:32:95:29:63:80:04:96:8d:b1:
         4c:6c:93:9a:25:a1:75:62:f0:34:ae:8f:c4:1f:a2:c9:3c:e9:
         99:ad:fb:5c:cc:d1:fe:57:8f:8c:7c:92:26:a4:50:5d:b3:1e:
         65:6b:7f:cb:ca:30:9e:23:1c:73:88:6c:63:41:a1:8d:10:d1:
         58:7e:01:c3:5e:c0:fe:3f:da:30:d2:75:bb:41:c6:7b:fa:9e:
         e7:9e:c7:d0:41:76:7b:9c:5c:8f:12:45:64:9d:7a:d4:04:ca:
         b3:70:6e:77:16:99:7a:e4:80:95:59:a6:6c:ce:b3:af:5c:36:
         5c:ab:1b:be:c1:97:5e:99:55:d3:24:35:3a:a5:9e:d9:3e:e0:
         5f:ac:1e:7e:a1:b1:97:c7:a1:80:11:a3:18:13:e5:9a:f3:0c:
         17:59:2b:7c:66:a2:39:1c:4b:09:0e:07:18:14:3c:91:05:68:
         bf:f3:08:29:68:b5:5e:10:d8:41:62:b5:d2:fc:93:3f:b9:7d:
         15:ae:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:13 2025 by rpki-client