Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc3ca289-1aee-365a-94ef-5c499f1ce9d7.roa
File:                     fc3ca289-1aee-365a-94ef-5c499f1ce9d7.roa (raw, json)
Hash identifier:          mLEslgZQUDSLgL6EpKC/xQoER/MyEage0x9MjxFnzTo=
Subject key identifier:   4D:2C:5B:31:70:3D:6B:EB:78:87:DE:2F:56:F3:E8:98:9B:3D:AE:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D1091DE05EFBB18E4DA4C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc3ca289-1aee-365a-94ef-5c499f1ce9d7.roa
Signing time:             Tue 22 Apr 2025 19:09:07 +0000
ROA not before:           Tue 22 Apr 2025 19:09:07 +0000
ROA not after:            Mon 21 Jul 2025 19:09:07 +0000
asID:                     6167
IP address blocks:        2600:1006:a134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:91:de:05:ef:bb:18:e4:da:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:07 2025 GMT
            Not After : Jul 21 19:09:07 2025 GMT
        Subject: CN=603dfc01-3a5f-4431-bad6-1437f36b1437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:ad:5f:4d:a5:cd:19:ad:a5:41:f3:dd:12:
                    02:0a:b5:6c:d1:3d:48:81:45:4d:6a:06:38:35:ee:
                    49:e1:b5:07:e6:de:2b:b1:66:62:2a:85:04:83:5f:
                    d2:06:79:fd:4c:00:03:a8:a6:72:c9:5d:3e:93:84:
                    cf:de:8b:9f:ae:59:90:ac:94:4b:2c:50:45:25:df:
                    cb:d5:b3:e5:3f:5e:5e:13:1c:73:b5:18:a4:c4:f7:
                    58:52:17:62:65:b0:6e:a6:e0:ae:50:06:10:1a:69:
                    73:c8:a8:2f:60:83:e7:26:98:56:fc:0f:8f:c3:0a:
                    6e:de:c5:c8:64:72:c3:62:dd:f7:16:58:95:95:44:
                    28:32:8d:30:da:d3:6a:26:03:d4:fc:18:c1:5c:a2:
                    91:35:b6:95:e4:9d:c6:a2:40:0a:44:d6:bb:93:db:
                    36:2b:3c:c6:db:52:3a:52:d5:75:67:74:de:bd:ad:
                    02:05:c3:5f:36:0c:12:07:af:f6:d8:3f:04:b7:23:
                    b9:0a:b0:cc:9b:51:8c:d5:21:63:fc:66:dc:09:4c:
                    e2:de:7a:8a:f7:47:b2:57:06:1f:b2:fd:2f:6a:67:
                    ba:c2:e3:15:44:d6:d5:cc:8e:52:d8:3a:91:04:ed:
                    b3:3b:70:8f:75:37:db:1d:33:44:64:ce:74:bb:bd:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:5B:31:70:3D:6B:EB:78:87:DE:2F:56:F3:E8:98:9B:3D:AE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc3ca289-1aee-365a-94ef-5c499f1ce9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:c5:f1:77:26:ec:aa:f4:aa:df:09:e3:35:51:51:ba:a5:
         04:39:fb:73:30:9f:6d:44:df:38:0b:99:ff:e5:5d:e9:79:4e:
         17:c8:ba:38:7c:79:8d:88:46:d2:20:39:09:e4:89:20:88:4c:
         84:ed:a3:92:69:f1:30:c6:8c:de:ff:7c:6e:1b:e8:84:07:dc:
         d2:be:18:29:2e:71:8c:b8:8c:b4:21:1e:43:8f:a6:a3:5c:1e:
         59:2b:11:d0:c1:30:2b:bf:37:f5:df:91:b2:45:0b:09:4e:47:
         05:30:b0:c3:69:99:a8:73:d2:11:98:6b:ff:92:71:e9:ed:72:
         be:46:fa:b8:dd:43:8e:66:61:12:b8:48:e4:f7:f2:17:59:44:
         34:12:5b:17:89:f8:12:0c:dd:98:e3:c0:d1:14:c1:df:dc:c6:
         72:83:bc:9d:fe:49:58:92:41:c8:ac:91:c7:3a:6c:55:68:ec:
         2c:96:ab:ef:23:7c:f7:68:01:b9:74:93:9d:17:ed:58:b4:88:
         f2:f9:4e:c8:2a:20:6a:7b:55:ae:29:22:30:6a:72:88:b8:64:
         ad:6a:6a:6b:ea:f4:92:e4:87:fe:79:8f:46:ab:87:ac:4d:c3:
         80:50:5c:67:ab:99:ab:32:6f:07:1f:8a:3f:84:85:a3:a4:36:
         ee:ec:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:49:33 2025 by rpki-client