Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2959ce2b-1805-3338-9f81-40ef340c0ef7.roa
File:                     2959ce2b-1805-3338-9f81-40ef340c0ef7.roa (raw, json)
Hash identifier:          VelLAVGlcNW0SbJ7DJ0yn3pgQCdm3bHpGlRXDJ81q5A=
Subject key identifier:   AC:AC:47:37:A5:C4:D8:1C:D7:DA:48:4A:06:1B:D6:E6:17:84:31:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B631E9A06EC1B104D21CA460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2959ce2b-1805-3338-9f81-40ef340c0ef7.roa
Signing time:             Thu 01 May 2025 19:11:31 +0000
ROA not before:           Thu 01 May 2025 19:11:31 +0000
ROA not after:            Wed 30 Jul 2025 19:11:31 +0000
asID:                     6167
IP address blocks:        2600:1008:b240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:31:e9:a0:6e:c1:b1:04:d2:1c:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  1 19:11:31 2025 GMT
            Not After : Jul 30 19:11:31 2025 GMT
        Subject: CN=ce72c53d-1abf-4f2d-bb4c-663dc9911954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:47:c1:7d:94:8b:e1:ab:90:57:36:56:98:
                    2c:6c:3c:b7:b4:27:4d:f1:8b:40:ba:9e:38:ba:d9:
                    2e:05:35:82:5d:21:4c:10:44:21:26:2c:cb:27:35:
                    79:de:a5:5e:c6:b9:a3:eb:8d:9f:4e:20:0c:64:b7:
                    e7:76:64:20:20:9b:d2:9f:8f:37:41:58:1d:9b:5f:
                    15:73:63:3d:81:17:42:ae:2c:47:5f:5c:52:81:f8:
                    dc:23:10:85:2b:dd:70:f9:37:b8:39:cf:eb:bb:96:
                    d7:46:ee:35:c0:75:4a:5b:66:e7:d5:17:d0:ae:b8:
                    34:c9:3e:30:6e:74:c7:6b:54:dd:34:4d:fa:30:56:
                    a5:c2:01:df:be:e2:b1:f2:f0:bd:89:9b:4a:1d:65:
                    1a:d7:c2:2d:14:8c:00:65:d4:1f:09:77:c9:15:de:
                    fd:1c:ad:43:d7:13:cd:3c:1d:93:3c:98:8c:26:61:
                    b7:19:3e:06:16:3a:f1:77:d0:e4:a3:85:3a:5a:73:
                    a8:18:91:ae:af:e6:b5:2b:ea:db:a3:29:6f:76:e9:
                    5d:49:46:9a:41:d8:5a:28:e3:89:1e:ae:48:79:a2:
                    52:76:38:cf:41:cd:81:0b:8f:3d:f2:54:f4:eb:12:
                    a3:b9:9c:ac:a8:bd:6e:49:5c:0e:c1:80:01:e8:02:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:47:37:A5:C4:D8:1C:D7:DA:48:4A:06:1B:D6:E6:17:84:31:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2959ce2b-1805-3338-9f81-40ef340c0ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:73:a5:ab:84:9d:cf:5e:22:97:59:92:4d:ef:33:2b:41:
         4b:48:89:ba:2d:eb:53:99:32:d5:8f:28:38:a9:f3:5f:d4:11:
         a7:ff:f5:af:a6:79:e2:37:4e:13:58:1c:35:49:4c:ac:ad:83:
         00:2c:6a:c7:80:ba:0d:52:56:ea:f6:2d:f2:49:2c:c9:b7:b6:
         6d:bf:8a:19:ad:52:e1:ac:3f:41:66:a6:58:b5:a0:ff:59:0c:
         bf:88:7c:e2:db:ff:00:7f:76:6d:01:a5:5a:7d:82:23:0c:7b:
         7a:06:28:38:8e:58:0b:8f:00:19:e1:ca:2f:32:62:e0:ae:ea:
         68:ac:0a:e2:23:be:6d:01:ef:6c:f7:8c:1d:a5:f8:d2:95:4d:
         98:b3:15:0c:f6:04:7c:ee:e6:4c:b9:05:93:54:4d:a7:74:1d:
         08:2e:e1:bf:25:0b:97:ce:62:26:02:b1:fd:dd:1f:f0:95:6f:
         d0:1f:c9:1f:ee:5c:ee:f1:68:5a:e3:f9:af:59:5b:45:0b:b8:
         0c:12:56:fa:7f:1c:6a:d9:c0:9c:c1:54:2e:86:c6:2b:cb:d2:
         8e:e9:70:e4:69:8c:66:0b:3b:d2:a0:3d:76:0c:10:9c:d7:aa:
         79:8c:11:f5:e7:9f:36:26:d0:3d:12:1d:db:ec:e5:6d:56:f0:
         db:2b:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:37:03 2025 by rpki-client