Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa
File:                     fcfddccc-0638-3d43-a05d-9807222a79c5.roa (raw, json)
Hash identifier:          +RgSY+z6LlLZywwIKdRWXCQfZIk3ivttn+4eacLayro=
Subject key identifier:   FB:86:00:BF:40:B0:01:62:10:13:01:1E:8F:40:11:38:AA:09:28:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1A217E0EC3D7B9B4F6E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1a:21:7e:0e:c3:d7:b9:b4:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ccd7a768-aaa2-4c88-8131-2ba3c7d1f0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:eb:03:71:6e:1d:a8:75:23:d5:79:f0:53:
                    66:e6:31:03:32:ae:8b:3f:c1:71:8c:df:db:df:f4:
                    48:c2:7d:5c:87:df:f9:8b:ff:3f:94:5c:0d:18:17:
                    d0:c2:42:b6:f9:90:a6:25:cf:9d:43:57:9b:00:09:
                    13:69:b7:95:2e:d0:8f:8a:91:97:9c:af:ac:74:4b:
                    64:6c:b0:c2:91:99:43:75:22:91:97:cb:e1:a7:3d:
                    1c:57:3f:5d:36:55:3c:62:fc:4a:4a:cd:fe:65:26:
                    66:ca:43:98:46:87:25:d4:59:ed:4d:83:87:7a:63:
                    cf:63:fb:00:23:2e:19:ba:81:06:de:7e:57:a1:19:
                    31:c4:fb:df:8b:01:f3:b6:6b:11:6d:65:07:59:4c:
                    1b:79:1a:56:74:c1:d2:b5:5b:a7:dd:93:fb:f5:90:
                    29:bc:2c:36:b1:1e:8d:d1:fc:f3:b8:a5:f0:b9:cb:
                    0f:90:ff:aa:06:67:99:da:97:43:b9:d0:43:76:f4:
                    7e:c9:11:07:bd:a9:50:11:49:ba:2c:a2:05:ef:98:
                    89:e1:cd:28:9b:ec:3d:b9:19:38:92:2d:71:e2:ba:
                    27:3d:da:1c:b9:30:14:02:2e:54:91:5a:33:ed:e7:
                    7d:ce:51:8f:5d:6b:ac:e8:20:c0:c9:4d:61:76:d0:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:00:BF:40:B0:01:62:10:13:01:1E:8F:40:11:38:AA:09:28:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fcfddccc-0638-3d43-a05d-9807222a79c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:8b:5d:34:4c:5f:a2:e5:9f:81:32:31:df:49:7a:e7:ff:
         e9:22:88:91:71:85:7e:88:8a:dd:58:06:60:16:41:e3:db:0d:
         0e:e4:da:55:2a:28:c1:f9:4e:cf:de:8c:76:6f:2d:79:c9:14:
         da:1f:1d:e3:ea:c0:58:f0:20:1e:b1:a7:4e:c7:2b:17:cf:56:
         78:51:aa:81:65:65:69:5c:3f:36:0a:77:86:cb:6c:76:9a:44:
         95:27:17:08:c3:ca:a0:ed:24:88:45:62:66:93:4b:fe:4c:f1:
         9a:6d:cb:be:eb:de:a8:11:e5:27:25:58:45:2e:cf:5d:a4:3b:
         f1:34:1c:9c:ba:ca:a1:a4:11:cb:cc:6d:7b:7e:4a:0c:e6:b6:
         52:c8:d2:38:c7:9d:b6:45:d3:01:fa:71:01:cb:86:17:ea:89:
         48:d9:d1:94:ff:7b:89:8d:be:9c:1f:b7:8f:7e:25:e8:99:9b:
         e8:69:f7:4d:00:00:68:68:c3:c1:74:0c:4c:41:6e:1d:f9:fe:
         2b:72:9e:5f:73:0e:2c:1d:5b:d4:75:4f:8e:61:de:24:73:1a:
         4a:f9:62:39:f7:6c:27:c8:ef:7d:65:3f:51:5c:3b:b3:65:71:
         c4:ae:7c:07:22:7d:c6:13:e9:a5:59:09:dd:e8:68:ba:3e:b6:
         1b:cb:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:29:28 2025 by rpki-client