Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e12c3386-b8e7-3027-8cfe-ee2f7eac0b32.roa
File:                     e12c3386-b8e7-3027-8cfe-ee2f7eac0b32.roa (raw, json)
Hash identifier:          /aSUk4frL8p+jCg1ZMcJffkZmthWr2EIjunxMQhcErA=
Subject key identifier:   AE:F9:E9:1C:B0:97:5C:06:F0:02:65:AD:A7:47:EC:65:44:C4:D9:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A0404E21EAE555EB82880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e12c3386-b8e7-3027-8cfe-ee2f7eac0b32.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b1ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:04:04:e2:1e:ae:55:5e:b8:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=3be1390d-ab98-4fa2-a286-c4a140f17fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:98:09:b0:82:ff:23:4e:71:2c:65:cf:d8:
                    75:57:a3:07:89:28:6d:55:1f:bd:50:06:72:4b:69:
                    c5:55:32:df:94:24:3d:b1:07:bb:dd:f1:07:07:a5:
                    1d:47:b9:b2:1b:5a:48:80:fa:32:27:23:3a:cd:e7:
                    ef:48:e4:e4:fa:37:c5:64:8b:c1:99:d9:69:0d:ac:
                    ea:4b:a3:dc:03:7b:0f:13:66:2e:5a:18:46:13:e7:
                    7b:d3:c5:59:ea:94:80:15:ea:8a:22:3c:76:01:15:
                    ca:57:57:9e:6e:22:42:30:4a:8c:8d:44:e6:de:f8:
                    63:b9:1b:63:ee:06:ee:9a:46:42:d9:2a:7d:ce:bd:
                    b2:48:50:f8:cf:2f:ba:c7:fa:c0:2f:41:ab:55:b1:
                    bb:cb:ce:2d:a9:36:90:95:39:50:8b:f9:15:18:06:
                    a5:cb:24:b6:f9:19:42:b9:95:8c:f5:e0:47:e2:9b:
                    44:2a:84:a6:7c:3b:f5:21:17:bd:71:42:b6:e8:90:
                    22:e8:cc:58:77:47:bf:96:ae:3e:2e:88:67:19:97:
                    1e:10:b5:e3:5c:1d:d5:b5:1e:d1:4f:9d:6f:a5:bd:
                    ec:69:77:73:b9:5c:98:2b:52:94:bb:d1:cc:fa:78:
                    b4:14:c5:15:2c:39:68:4b:ab:61:42:11:f1:0c:8c:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:E9:1C:B0:97:5C:06:F0:02:65:AD:A7:47:EC:65:44:C4:D9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e12c3386-b8e7-3027-8cfe-ee2f7eac0b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:e5:d5:0b:a6:d8:39:58:2a:6c:ef:75:6d:d2:6f:1f:59:
         61:13:73:e5:57:11:78:d4:3d:5e:c2:30:4d:83:5b:c1:34:fb:
         37:81:5f:da:13:fd:f5:43:ba:99:27:e3:c0:ac:a1:ca:ff:7d:
         78:8d:6c:6c:3e:9d:d2:6c:09:36:5c:01:f0:da:4f:89:c7:d1:
         b7:67:da:67:ef:89:76:2a:fc:47:c6:48:78:1f:7b:03:e2:c0:
         00:df:62:bb:fa:f1:81:bc:ad:1b:bf:10:49:55:36:92:86:a0:
         08:46:44:7c:22:b2:ad:ec:2c:8b:ce:b7:ac:e1:60:34:5e:e1:
         f3:36:29:5c:3f:a9:4b:c0:c8:43:28:2e:78:34:32:1e:32:f7:
         7f:53:c4:74:5b:8b:36:ea:15:5a:6a:44:bc:67:b0:54:36:92:
         b7:02:c3:69:82:24:1b:00:88:2c:77:94:8c:8c:5a:a7:7c:4e:
         26:83:dd:a6:96:38:55:cc:ee:08:b8:3f:1d:b3:82:10:5f:29:
         e9:d1:c9:86:89:52:7d:b7:2b:c2:5e:50:87:8b:f8:c4:4c:fe:
         63:1b:70:c9:82:5b:8f:dd:19:d8:68:bf:f3:54:62:97:bb:70:
         a5:23:cb:f3:75:9f:f8:3e:a6:08:01:6a:1c:ec:3c:79:76:6e:
         9b:36:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:41:07 2025 by rpki-client