Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92175080-6bf4-3bd0-ba81-ab1ce0a22e5d.roa
File:                     92175080-6bf4-3bd0-ba81-ab1ce0a22e5d.roa (raw, json)
Hash identifier:          sDdyOXJ+sJFWApHsFg+qbAxXoFFnWaJjpBscayuYRKA=
Subject key identifier:   37:65:5A:B6:AA:D1:3B:C4:2F:D2:05:D0:42:40:CA:DD:4C:73:84:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A15079899EA63BEB0C780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92175080-6bf4-3bd0-ba81-ab1ce0a22e5d.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100a:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:15:07:98:99:ea:63:be:b0:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=822ec3dc-54b7-4794-832b-0294cc0664bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:78:c0:c3:8f:c7:09:ec:f0:4e:9a:fe:68:
                    f0:61:1b:20:5e:91:8e:03:f9:6e:52:04:f1:45:46:
                    52:03:b5:e0:45:92:26:d9:56:b8:16:ba:43:2b:c4:
                    0e:b9:4a:33:c0:63:cb:b1:c0:46:03:14:0f:4a:7f:
                    f0:11:84:21:c6:cb:ef:38:ef:9b:e5:2f:50:d6:25:
                    8e:f7:c4:14:72:15:1a:22:ba:90:02:80:a7:19:54:
                    e0:90:8b:ac:78:df:96:ea:07:36:88:e7:c1:07:4d:
                    c6:b1:2f:c3:a2:7b:5f:f5:72:b8:83:2a:8d:ae:2e:
                    0c:6a:c5:dd:de:01:78:cd:8c:69:d4:bf:38:81:6f:
                    aa:fb:a1:86:d3:1a:b7:ba:fa:4b:0f:92:05:ad:84:
                    ab:c9:c7:02:f4:79:80:96:c2:b1:fa:d9:27:48:ec:
                    a1:d6:f2:b1:df:57:9b:d6:72:d9:f9:29:ba:fa:5b:
                    e9:bb:63:b0:be:ce:73:93:0e:86:61:93:73:25:6d:
                    9c:0c:ec:6e:79:2a:10:13:3a:03:2f:87:a0:0a:a2:
                    0f:91:7e:6a:47:25:29:f3:c9:94:85:93:2a:28:8a:
                    3e:9e:f6:ae:b3:ee:40:41:47:6e:dd:b3:ba:f2:ff:
                    72:85:72:23:6f:74:30:6f:78:28:1b:c7:fe:70:56:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:5A:B6:AA:D1:3B:C4:2F:D2:05:D0:42:40:CA:DD:4C:73:84:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92175080-6bf4-3bd0-ba81-ab1ce0a22e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:20:39:5d:90:3e:50:1f:82:20:b6:50:37:86:c0:1d:b3:
         2d:60:2f:42:6d:30:80:57:8c:b5:0d:19:34:06:4c:13:3b:ff:
         bb:d7:7c:e4:b9:d8:f1:41:0f:bf:e1:3d:65:8b:ba:1f:f0:69:
         c2:20:27:c4:65:d2:e8:95:7b:de:fa:34:ec:46:2c:1e:21:a5:
         ad:75:f0:f1:11:ea:58:1c:61:3c:af:73:45:fa:97:c6:a8:70:
         26:82:0b:de:c9:ed:18:68:0b:f7:1f:24:14:5b:2e:dc:60:72:
         55:9d:00:10:da:c9:8a:5a:53:35:1e:03:ca:21:a3:80:a2:e1:
         a9:a3:f5:10:b9:61:59:b7:ba:67:43:c1:24:d8:54:23:c1:67:
         c5:01:02:6b:0c:f2:e7:08:1a:5a:f2:82:0e:72:03:21:41:3a:
         48:87:d1:f4:65:70:b2:2f:16:ac:8d:05:42:d8:72:9c:3e:88:
         0e:f1:88:86:d0:68:c1:21:7a:fb:9d:d1:b5:d4:0a:fe:64:7f:
         90:7d:fb:87:93:d0:2c:af:76:93:5c:c7:ab:50:ea:0f:8a:86:
         0a:b8:6f:3e:b2:88:e4:f5:1f:8e:9e:a1:61:3b:5f:cc:14:7a:
         7b:ed:51:61:19:f5:da:82:f2:37:15:7c:dc:5f:41:84:32:2f:
         78:18:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:39:33 2025 by rpki-client