Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de5475a-1c41-3a90-ba2e-001408b4a927.roa
File:                     8de5475a-1c41-3a90-ba2e-001408b4a927.roa (raw, json)
Hash identifier:          OqJyqyw28z+zXeYLvV3mbr44PWlAe4d8hCwtcAOmilw=
Subject key identifier:   1D:42:B2:F6:82:C9:AC:B1:75:BF:3F:8C:06:6F:A6:8D:61:6F:B4:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498339FFE119E7DB39EBDD6F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de5475a-1c41-3a90-ba2e-001408b4a927.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:be06::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ff:e1:19:e7:db:39:eb:dd:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f0d3689b-9a70-4b29-a36f-cb24d2f54350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:ca:30:58:66:e1:3c:e7:e3:89:4f:8a:fb:
                    0f:2d:0f:b3:9e:c3:15:8f:21:a2:c6:60:d6:7c:4e:
                    5c:08:64:79:35:61:b9:25:8e:23:7d:fa:ab:18:59:
                    c8:5e:19:87:66:b6:be:4e:8e:b4:ce:af:7c:00:e3:
                    36:2e:fa:8d:5f:27:e2:f2:30:8a:e5:95:cf:ac:35:
                    ca:77:6f:e1:34:7b:11:53:d7:b7:39:06:b6:ed:c8:
                    0d:3b:2e:b6:bb:e7:c5:ed:cf:80:21:9e:71:6a:b1:
                    f7:a1:22:5b:7a:f4:a4:4c:eb:a8:54:57:55:da:9f:
                    cf:48:76:67:f4:85:87:61:25:dc:2d:72:12:78:8c:
                    6f:8e:31:67:af:07:a9:a1:38:cd:46:1b:33:b7:36:
                    3f:b5:af:1a:60:0c:87:e6:13:8f:9a:77:a2:2f:45:
                    e4:12:e7:b4:c4:5d:59:2d:98:c8:34:c9:29:8b:59:
                    a9:fc:c3:29:ca:17:dc:5c:88:07:87:18:87:f1:fc:
                    ed:69:da:05:fc:ad:4f:ae:b5:ae:50:c4:f4:9f:ae:
                    88:f9:ac:fb:48:18:94:f7:26:44:97:25:fd:6c:15:
                    a1:cd:07:60:1c:d1:44:3c:f3:28:48:2a:62:64:2a:
                    7d:c0:d5:e9:2c:82:a3:e2:d9:b8:cb:35:28:2f:fb:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:42:B2:F6:82:C9:AC:B1:75:BF:3F:8C:06:6F:A6:8D:61:6F:B4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de5475a-1c41-3a90-ba2e-001408b4a927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:be06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:6e:8f:5d:a5:77:a6:6b:7f:39:39:4b:fb:43:4a:38:0a:98:
         55:76:8e:20:59:85:3a:eb:a5:ba:06:5f:a1:d8:aa:3a:65:84:
         9e:e2:82:9c:65:db:ef:8c:ba:44:49:31:ab:df:0b:75:ae:3b:
         9d:9e:79:fa:d4:cd:be:e0:f8:09:08:4c:f6:55:1b:61:51:2d:
         b0:4a:8e:38:e6:e2:7a:b3:46:11:45:d4:8e:84:6d:1a:eb:80:
         81:a5:75:91:b5:a2:e2:c1:2e:90:1b:84:94:50:45:79:3d:52:
         a0:66:15:13:ac:ce:6e:c7:cd:ab:19:59:8c:87:08:fd:c6:b3:
         92:38:73:a6:22:6b:4a:f1:a8:2a:99:6c:d6:67:51:3c:ed:c1:
         d0:35:6a:6f:fe:79:ba:ac:06:e8:42:9c:e7:e3:d5:38:35:21:
         73:aa:4f:67:56:d7:61:77:e7:8a:2a:bc:ad:25:89:0e:87:85:
         6a:c2:1e:0c:b8:cb:09:d7:67:00:03:0a:84:6a:bc:2f:4c:e3:
         17:2d:bb:18:00:2f:3a:82:96:5c:bd:ef:7b:03:c1:87:4b:e8:
         c0:75:42:3d:c0:1f:fb:27:71:9d:67:58:3e:48:e7:cb:6c:e2:
         bb:bf:4d:88:77:ea:2c:fd:42:6e:81:87:95:4e:7f:38:26:a9:
         64:f0:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:30 2025 by rpki-client