Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7974b7-a072-3278-9837-1c4e8c60ea27.roa
File:                     7d7974b7-a072-3278-9837-1c4e8c60ea27.roa (raw, json)
Hash identifier:          r0zJraWhHsP3ju7JncFceO9W98ah5/R6Wx08uVtt0CY=
Subject key identifier:   ED:6A:E2:ED:D7:15:FC:AE:4C:25:05:7F:F2:37:B1:11:70:C5:E9:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D10949FDAB089E7A5E71E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7974b7-a072-3278-9837-1c4e8c60ea27.roa
Signing time:             Tue 22 Apr 2025 19:09:09 +0000
ROA not before:           Tue 22 Apr 2025 19:09:09 +0000
ROA not after:            Mon 21 Jul 2025 19:09:09 +0000
asID:                     6167
IP address blocks:        2600:100c:a230::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:94:9f:da:b0:89:e7:a5:e7:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:09 2025 GMT
            Not After : Jul 21 19:09:09 2025 GMT
        Subject: CN=dfee0ad0-dfaf-4207-8264-be65be2a3577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:ce:47:d6:af:b9:77:4f:49:ae:4e:96:3b:
                    79:0a:c8:1a:04:ee:7f:91:da:92:21:db:7e:e5:d9:
                    81:4b:c3:8f:c7:7b:39:25:eb:e5:b8:cd:ae:31:dd:
                    40:b7:25:c2:f3:18:07:2b:fd:38:52:89:6b:c5:ba:
                    f4:59:3b:c1:1e:7f:4e:4c:98:03:ae:51:70:55:9a:
                    63:41:9e:b3:49:17:da:d8:f5:2f:ba:55:5b:2c:d0:
                    1a:04:36:84:3d:3f:1d:40:1d:6d:3e:a0:72:5b:25:
                    bc:24:0e:a9:4f:dd:ca:20:49:6e:23:ec:19:9d:70:
                    bb:33:20:9b:e4:a7:94:b5:af:f6:06:c8:54:c0:94:
                    bf:39:7a:68:16:f2:42:11:a9:03:33:37:12:93:bd:
                    c2:78:ff:a1:69:ad:0d:4e:68:1c:a9:cc:b5:4a:67:
                    85:ba:1e:ce:06:0d:4f:35:ff:b2:49:e1:70:d1:0f:
                    b6:e0:71:54:07:64:a2:33:3e:48:3d:6b:79:14:41:
                    59:07:e6:4d:27:df:b5:f9:01:5e:c7:2f:d6:b4:24:
                    8a:5e:52:49:57:22:75:3a:a5:7b:fe:38:60:40:1d:
                    85:6f:4c:2f:1e:43:fc:9a:dc:cc:5e:75:38:46:7e:
                    bd:32:fc:8d:28:9c:da:16:5b:20:43:ed:25:77:2b:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:E2:ED:D7:15:FC:AE:4C:25:05:7F:F2:37:B1:11:70:C5:E9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7974b7-a072-3278-9837-1c4e8c60ea27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a230::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a4:d1:bc:35:dc:5e:0a:8e:3d:9f:2b:b2:db:a0:3d:fe:b7:
         9c:a8:cd:e2:ab:4e:52:39:82:4e:da:48:c8:e9:43:66:7b:98:
         e4:ce:b5:63:0a:ba:b9:b9:91:98:6c:63:49:a0:99:a1:39:b8:
         cb:a0:6c:89:00:7f:ee:39:88:ff:39:a4:6c:20:33:0a:97:80:
         e4:47:41:45:76:16:91:0a:b8:48:2a:26:56:73:53:c0:4e:b5:
         c6:ef:48:92:39:19:75:4e:b5:34:78:5c:0e:64:5a:84:a8:ec:
         a3:6c:90:69:45:09:e0:9e:ad:30:c9:a8:fc:1e:ee:90:f7:28:
         fa:90:60:7b:62:8d:99:c0:e0:0f:ca:08:5a:20:59:8e:d4:76:
         25:fa:d4:88:59:db:70:c1:bb:14:da:0a:b3:b3:a5:b1:66:41:
         19:c4:68:df:18:95:96:20:53:95:7f:c8:ad:b8:42:4c:a5:67:
         48:e9:96:6f:a6:cc:b0:ce:1b:00:da:b6:d4:48:6c:86:e6:36:
         62:86:fb:62:1c:14:4f:29:44:9b:24:7d:02:99:d8:07:70:bb:
         b7:2f:86:3a:71:ba:75:5d:b6:2e:1e:69:32:74:4f:4c:34:be:
         54:54:99:e4:2d:84:63:7d:50:09:f3:68:3c:23:ba:9d:48:fe:
         2f:99:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:28:39 2025 by rpki-client