Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa6207ee-6e7c-3b11-8576-8e8c6b270d17.roa
File:                     aa6207ee-6e7c-3b11-8576-8e8c6b270d17.roa (raw, json)
Hash identifier:          z9oeqjR/LEPedO/RXv9Y4Va0PHmUMvQsAtWVJZ4RJ3M=
Subject key identifier:   A8:BF:33:0A:29:89:88:6E:11:D2:26:C4:28:D0:37:3B:E4:CA:0F:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A11FC0CFF70250B608D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa6207ee-6e7c-3b11-8576-8e8c6b270d17.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1005:b250::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:11:fc:0c:ff:70:25:0b:60:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f1d7f6bf-b459-47d4-b283-222ad98a8aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:1b:9d:6d:46:43:fe:06:11:b1:eb:22:b8:
                    29:8c:53:26:e3:4c:94:58:1b:f5:f5:29:0b:bf:b2:
                    e0:90:70:3f:a6:1c:a0:fc:d3:51:aa:f1:4a:71:ed:
                    fa:1e:89:35:83:7d:1e:37:8c:e1:57:90:03:0d:a6:
                    8b:84:96:d7:72:14:9c:b1:39:d7:a9:f5:5c:fd:35:
                    aa:07:5f:a5:b2:57:9f:4c:53:16:fd:74:ee:c3:d2:
                    a2:ad:1b:2e:1b:e9:17:b1:15:46:f1:f1:8e:1d:c8:
                    61:64:70:a3:e1:a9:c6:66:36:bd:8b:a9:94:fb:c2:
                    97:47:f0:70:ba:18:e6:28:c4:d2:46:81:dc:df:4f:
                    72:0a:af:44:84:31:e8:81:ff:35:93:74:f5:29:82:
                    ed:32:ee:5e:e8:4d:99:a6:2b:09:d7:1e:43:6a:f3:
                    c5:91:93:a9:4e:93:ed:ad:82:79:f7:9a:9a:d2:0c:
                    f9:e5:1a:fe:7c:ab:38:3f:33:48:2c:00:bc:53:1f:
                    34:3a:19:87:9c:b0:71:2c:cd:c0:eb:7f:10:c9:b1:
                    31:c5:e0:b9:8e:27:31:9c:71:24:22:14:41:ac:37:
                    bb:b7:9f:6e:be:fb:e6:c3:c4:dd:19:9e:23:24:17:
                    4a:e1:59:25:07:94:d3:c8:4d:9b:d9:86:1d:03:18:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BF:33:0A:29:89:88:6E:11:D2:26:C4:28:D0:37:3B:E4:CA:0F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa6207ee-6e7c-3b11-8576-8e8c6b270d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:25:ca:73:2d:86:ce:15:63:b9:ca:a0:e6:d8:cc:8f:ae:
         b5:52:be:1a:6a:17:8f:97:e6:97:cf:35:9b:37:63:fe:13:96:
         20:b0:94:bf:a0:f3:2a:7b:72:05:c5:d8:0f:eb:e1:b3:f2:b2:
         5e:a2:1a:17:a3:7c:4e:43:3e:c8:27:fd:63:a8:06:1d:10:70:
         63:b7:58:47:65:d5:c4:95:8e:b7:b0:21:f9:cf:f7:45:8a:5f:
         72:26:ae:df:14:d1:eb:58:b9:1c:9f:fd:b1:76:a6:35:21:f8:
         78:6d:13:ab:31:50:53:1d:b4:18:53:db:b3:8d:fd:2e:6e:35:
         97:8b:e0:46:f9:96:67:60:f9:8a:71:65:a1:75:2a:20:e5:41:
         07:c1:39:bf:0c:94:c7:d9:a7:ea:1c:88:f2:b3:2f:6e:ff:f0:
         5e:ba:fd:15:6a:c8:f3:6f:48:01:8e:3a:60:5a:7f:2a:72:32:
         25:10:af:44:14:10:50:3b:aa:ac:c7:f6:e6:d2:52:46:9f:da:
         8d:bf:52:d0:b9:86:3d:ca:93:82:02:ec:a7:38:5c:6d:95:b9:
         9f:ef:8a:15:c9:93:62:70:82:b9:a3:cd:af:82:8d:1a:53:f4:
         30:35:a8:fa:25:62:1e:f1:84:13:91:ed:6b:ba:30:b7:05:c9:
         1e:27:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:33:18 2025 by rpki-client