Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812a5506-7932-3fe3-a0af-3016d8897dde.roa
File:                     812a5506-7932-3fe3-a0af-3016d8897dde.roa (raw, json)
Hash identifier:          xez9xf7joJo5lvy0L4FznSnStWwO3fQ25n9yrrZ7aHE=
Subject key identifier:   40:72:A5:E7:02:40:52:C1:5D:0E:08:DA:50:8C:CD:8D:EC:90:3B:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E91FAC6912EB81EA1B7E8800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812a5506-7932-3fe3-a0af-3016d8897dde.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:100b:a011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:ac:69:12:eb:81:ea:1b:7e:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=1ce57b0e-d2a6-4bb2-93e2-9c978c719520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:eb:a8:c5:7c:d9:97:ce:a6:fc:01:a1:ba:
                    3a:94:e8:8f:d8:18:69:0f:ce:4f:f9:a7:21:bf:54:
                    84:6c:87:35:99:f3:ce:e0:5c:d3:5a:f9:0a:64:ba:
                    68:02:e0:e1:d4:64:52:e7:cb:26:32:8f:91:04:a9:
                    8f:2f:c5:c7:46:f2:d4:04:a5:cc:55:fa:32:b8:fa:
                    7f:4e:5d:08:3a:03:28:f7:cd:b4:c6:1e:86:7c:0b:
                    38:4a:a4:b6:c8:8b:a4:ab:91:44:79:ae:32:c0:3a:
                    de:6c:9e:0e:62:6c:5e:b9:18:2e:b3:be:2a:b4:15:
                    7b:42:40:09:2c:41:4b:ac:b3:8b:f1:87:e3:30:1d:
                    13:2a:e3:54:59:17:98:b9:71:5a:1f:56:f9:78:74:
                    27:10:16:ad:f2:90:1a:5a:bf:4f:34:fd:24:f6:63:
                    85:37:93:f9:d4:6b:62:56:cd:cb:b2:e2:0a:a0:03:
                    4f:13:28:27:28:dc:db:5a:c5:7f:7d:38:eb:e4:73:
                    7d:da:27:7a:24:93:a4:8f:5d:d8:e9:11:ce:59:4e:
                    58:f2:27:3b:d1:9e:ee:bf:2d:69:22:f5:65:0d:ff:
                    49:14:a1:92:93:38:78:8d:4a:cd:3c:63:a1:9f:0e:
                    a2:8b:b8:4b:a7:b6:3e:5a:98:a1:f6:fd:40:93:fa:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:A5:E7:02:40:52:C1:5D:0E:08:DA:50:8C:CD:8D:EC:90:3B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812a5506-7932-3fe3-a0af-3016d8897dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:a011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:8a:0f:bd:80:a4:61:4e:ca:75:2e:82:9e:6e:50:cc:f2:
         f1:c1:9c:26:58:eb:a7:4d:e0:40:17:87:8b:02:03:6d:67:3f:
         ba:0a:3d:d5:56:6e:fc:8a:ac:b5:a7:74:fe:54:49:2a:91:72:
         ce:cf:1c:78:f8:eb:2d:89:7e:a5:95:3f:20:8c:f1:4c:b6:cd:
         4f:3c:1d:59:a8:00:86:2f:50:d5:8a:73:51:e8:cd:42:28:50:
         2a:ee:ae:fa:f8:e7:89:d8:6c:af:31:c2:50:9d:02:17:7d:30:
         49:26:42:0d:b8:8c:89:ac:81:1a:cb:00:7f:67:96:4f:0f:14:
         46:ad:64:68:50:7b:2f:86:e1:16:13:0d:d1:5e:94:90:bb:41:
         c4:8a:10:99:28:15:f1:9c:fd:da:d8:4c:bf:34:83:a6:c8:3b:
         95:be:31:3d:32:cf:23:7b:e7:78:f9:f9:a0:54:26:5f:1b:1a:
         eb:74:3e:63:82:e8:f4:2d:5f:0f:1f:95:a9:a8:e6:ae:76:e8:
         52:98:71:03:75:01:05:6d:eb:04:71:bd:81:be:c0:9d:3e:c3:
         ac:28:d3:f5:e5:93:f3:f5:1c:e5:5a:28:2c:0a:23:c1:a6:57:
         21:d0:f8:8a:eb:24:93:36:ae:8a:24:1b:8c:3b:a3:64:99:32:
         45:a4:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:34:32 2025 by rpki-client