Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3af0551-525d-3930-b087-3bffc4988c18.roa
File:                     e3af0551-525d-3930-b087-3bffc4988c18.roa (raw, json)
Hash identifier:          13WNw7SILaAuluH2lqUNrxN9/hnVYZ/WR+qZaFGWevA=
Subject key identifier:   F3:56:17:95:40:82:A7:F3:08:6E:E3:87:EE:D8:9A:5C:EF:B7:E1:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EB4ACFCF5C1F354364EBAA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3af0551-525d-3930-b087-3bffc4988c18.roa
Signing time:             Tue 20 May 2025 19:39:31 +0000
ROA not before:           Tue 20 May 2025 19:39:31 +0000
ROA not after:            Mon 18 Aug 2025 19:39:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b240::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:4a:cf:cf:5c:1f:35:43:64:eb:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 19:39:31 2025 GMT
            Not After : Aug 18 19:39:31 2025 GMT
        Subject: CN=8620277f-2c02-4577-9f04-428d51d53b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:31:99:c1:06:db:17:04:e2:90:8c:1e:be:
                    48:0d:15:a2:29:df:0e:c0:b9:26:9a:8e:d1:b8:2c:
                    94:ab:1d:c9:1b:eb:f3:52:c1:47:56:c8:b9:5b:d2:
                    cd:cf:62:9f:e0:ce:e6:89:46:73:ae:51:1e:c1:8c:
                    fc:78:14:df:f0:37:0a:fc:5e:5a:ef:c8:21:8a:95:
                    57:ab:f7:b0:db:09:a9:fc:ae:f3:0b:20:2f:c6:3b:
                    de:b0:3f:9a:52:32:67:3d:60:40:df:1c:4f:ff:bd:
                    54:ca:62:5b:cb:97:d0:11:98:23:97:59:8c:ee:15:
                    7f:f1:df:b1:b4:3f:76:23:1d:fb:fd:77:62:85:6c:
                    ee:5c:76:58:b7:ce:ea:ee:cd:fa:50:18:f1:0d:95:
                    c8:da:37:e3:de:20:bb:9a:1e:00:83:58:e3:e3:b7:
                    9d:30:12:85:77:42:a8:f9:e5:a2:d4:7b:92:de:f3:
                    9d:01:71:d3:5f:a3:6c:b0:59:fe:a9:cc:a1:d4:8b:
                    97:09:7d:3d:ae:b1:8e:03:27:90:e4:d8:dd:56:52:
                    ef:52:07:99:01:00:a8:67:69:57:7e:2e:56:39:1d:
                    9d:69:0a:42:5d:77:74:5b:2f:67:3e:43:21:5f:82:
                    b5:34:f2:92:6d:10:58:47:4e:ad:51:08:e1:ab:51:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:17:95:40:82:A7:F3:08:6E:E3:87:EE:D8:9A:5C:EF:B7:E1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3af0551-525d-3930-b087-3bffc4988c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b240::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:e4:25:64:7c:7f:26:c2:8f:af:16:76:81:e9:13:97:df:
         4f:e9:b3:cc:4b:97:41:b4:45:10:52:1c:90:aa:4b:98:ef:ec:
         f2:4a:5d:22:8c:06:c6:de:9e:dc:14:69:40:1b:89:ab:81:db:
         92:8e:9e:6e:c6:04:66:51:7e:81:5a:bb:80:39:7d:78:a5:40:
         0e:51:1a:d1:95:77:88:b7:63:c3:57:a8:cf:cb:1c:e9:c3:d7:
         4e:97:e4:9c:b8:54:9c:da:94:8b:39:b6:77:b2:ec:af:cf:ee:
         c5:41:b2:a6:3c:0b:40:fa:bb:72:32:01:9a:63:b0:4b:f8:ab:
         71:dc:fa:ee:30:1f:3c:f2:ae:cb:8e:c4:d6:04:b1:6f:1a:30:
         19:5c:b9:60:2f:38:00:4e:d7:20:7b:e9:9e:8e:29:57:4b:d8:
         59:fd:c7:3c:0f:df:3a:48:0a:e5:12:41:11:e3:58:6b:c0:14:
         60:9d:91:01:a5:c7:e6:cb:c4:bb:0c:20:9d:68:cd:79:f4:e6:
         f2:95:5e:8e:2a:df:11:f8:0a:ab:3c:75:dc:5b:d6:ee:80:7e:
         ad:93:83:88:20:f2:0a:ee:a8:96:1f:77:88:3d:54:b0:bd:85:
         1a:9a:41:04:63:96:8b:21:7e:83:7b:52:e2:1c:02:cc:47:4a:
         87:af:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:09:14 2025 by rpki-client