Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7132d3f-98be-355e-8507-6c30fc870cad.roa
File:                     d7132d3f-98be-355e-8507-6c30fc870cad.roa (raw, json)
Hash identifier:          1Umuhmz9jlUdcqVgRosTR9B5Yt6p7Rl/ii4DdJHVFw4=
Subject key identifier:   67:91:06:13:FC:16:8C:A3:27:31:BB:AC:DD:CA:80:5A:20:19:6F:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D109FCD11E87B705B779B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7132d3f-98be-355e-8507-6c30fc870cad.roa
Signing time:             Tue 22 Apr 2025 19:09:14 +0000
ROA not before:           Tue 22 Apr 2025 19:09:14 +0000
ROA not after:            Mon 21 Jul 2025 19:09:14 +0000
asID:                     6167
IP address blocks:        2600:1017:a8fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:9f:cd:11:e8:7b:70:5b:77:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:14 2025 GMT
            Not After : Jul 21 19:09:14 2025 GMT
        Subject: CN=4be172f4-4285-4a51-84ae-962c095d9c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:61:2a:4c:d1:d3:ed:00:95:05:7d:94:51:
                    05:69:bb:d1:1c:9c:ac:3e:6d:89:08:c6:b5:10:47:
                    09:7a:70:39:6d:be:56:32:32:23:df:8b:bc:1e:8d:
                    b4:37:96:8c:a8:99:7e:d4:7b:80:76:30:ec:07:33:
                    cc:08:1c:f9:97:25:40:63:00:5f:d2:34:b1:10:75:
                    1f:80:9d:5c:24:2a:24:ce:6b:6c:5e:dc:51:a9:ac:
                    1b:91:70:86:e0:68:d1:fa:67:43:25:66:f6:f3:3f:
                    b6:1b:17:8d:0f:ee:14:fc:e9:8d:ba:b6:02:3d:0f:
                    8a:f7:2e:fe:28:20:b8:61:35:3e:44:88:d1:85:42:
                    0e:ce:a0:a1:96:e1:05:c4:67:1a:5f:f8:7b:be:a9:
                    95:73:33:72:eb:4d:9d:e7:77:f7:5d:ed:7a:09:a1:
                    b2:1a:58:72:f9:4b:93:ff:96:14:00:52:4b:3e:67:
                    04:24:d5:85:1b:2d:a0:eb:70:7d:fc:72:1c:07:19:
                    26:67:ec:b0:4a:ab:cd:21:56:29:f7:3b:ea:c5:4e:
                    a5:11:8c:8b:a0:09:db:ea:1f:1a:1e:54:ff:f8:d4:
                    85:d7:50:1f:81:2b:fb:09:00:76:2b:2d:f5:aa:b2:
                    e6:b5:f1:f9:a8:0c:da:3f:a3:29:ab:a5:0f:3c:c9:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:06:13:FC:16:8C:A3:27:31:BB:AC:DD:CA:80:5A:20:19:6F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7132d3f-98be-355e-8507-6c30fc870cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a8fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:42:b8:2e:a5:65:6e:fd:e8:d7:8d:00:9a:27:16:d4:8b:
         ab:05:f2:7c:ba:cc:83:64:2c:92:77:c7:3a:af:a8:22:c5:f6:
         d2:f6:34:c3:58:a5:5b:db:10:ae:72:30:65:f5:25:73:b6:1e:
         9e:06:f7:ee:5e:d1:0f:24:27:00:c4:04:43:2d:a4:6a:89:23:
         cd:11:4f:f7:93:58:8e:61:5c:d3:0c:a7:b4:31:4e:bb:05:d7:
         25:c3:48:42:7b:fb:77:d9:ed:ee:2d:1d:6a:72:4c:65:d2:15:
         eb:73:76:a9:87:9c:73:17:2c:e3:67:1d:3d:8d:4b:b5:13:94:
         61:56:b7:ce:a3:e1:ad:d5:0d:cd:e8:2d:02:29:57:12:ff:7c:
         80:42:03:d3:8c:eb:08:45:d5:f3:f8:27:65:0c:58:02:ad:a7:
         d3:45:e9:b0:07:a3:eb:b5:67:6f:3d:e4:0e:a9:81:27:14:bb:
         7b:1e:b5:02:99:aa:b1:97:29:27:c0:1a:1f:05:34:fc:53:f8:
         b7:8d:7b:5d:8f:17:be:49:6f:c6:44:6b:4a:15:f7:52:a3:c5:
         d6:c9:b7:c8:9a:ac:73:da:0a:b5:4c:65:94:c3:f7:b2:af:28:
         ae:88:50:34:3d:a9:e4:bd:85:00:2f:fd:d7:44:35:2a:6a:07:
         58:50:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:51:16 2025 by rpki-client