Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5dfeb-708c-35ca-bbb3-df5cf8bc8821.roa
File:                     24a5dfeb-708c-35ca-bbb3-df5cf8bc8821.roa (raw, json)
Hash identifier:          /lgHg984fB5VBMHZE4md2qo12GNqpFOpMX0P9LOaCtw=
Subject key identifier:   9B:21:5E:C5:42:28:13:AB:8C:64:00:EB:9D:C1:CA:A6:8D:FF:08:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29558592C8CF9481CEB6D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5dfeb-708c-35ca-bbb3-df5cf8bc8821.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1016:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:85:92:c8:cf:94:81:ce:b6:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=721b2e9c-7757-418d-8a0d-0c2c7320b32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:e6:ac:f6:dd:bd:77:85:95:b2:fa:14:42:
                    bd:62:ca:81:8a:31:80:6a:81:37:a5:2e:4b:bd:4a:
                    15:d9:23:fa:a9:61:f0:23:cf:8e:6e:23:4d:2c:e9:
                    aa:f2:5f:20:02:f3:17:4c:d9:88:84:f1:ab:03:fb:
                    32:e0:90:eb:f5:e5:0e:af:85:4c:2e:14:61:b6:4c:
                    93:5a:f6:9b:2a:9d:81:fb:b1:47:c6:1d:cf:a6:48:
                    6d:1b:08:cc:9a:16:bd:51:9a:1b:66:73:2a:7f:7d:
                    2c:e9:b8:23:ee:3a:23:8a:11:82:29:96:9f:a8:0f:
                    2d:09:b0:c5:85:33:98:5b:e6:f1:38:79:7c:a0:e0:
                    7f:00:aa:00:55:99:f8:91:64:3a:8b:a0:8c:9c:b6:
                    44:d8:10:58:1c:8b:61:96:21:bb:b4:30:08:d4:27:
                    31:5c:d6:8d:d3:a8:f1:d4:31:12:0b:1f:a5:ed:d4:
                    1d:60:4d:62:5b:c5:d3:fd:f4:e4:cf:bf:a5:f3:f0:
                    e8:c8:bd:15:88:18:9d:87:4d:b4:47:34:dc:36:cb:
                    40:cd:61:70:7e:91:a0:dc:d4:f3:8b:63:7a:db:19:
                    fc:be:5d:41:74:de:58:27:11:88:7b:47:b1:4c:6b:
                    fd:0d:11:02:f5:da:56:ca:d2:53:0f:ad:99:78:45:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:5E:C5:42:28:13:AB:8C:64:00:EB:9D:C1:CA:A6:8D:FF:08:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5dfeb-708c-35ca-bbb3-df5cf8bc8821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:65:e6:b5:fb:95:5a:02:5d:5a:1d:b5:b8:3d:91:a4:dd:
         06:81:19:d8:bf:3e:ec:b7:a6:05:b3:59:33:bd:14:3a:9d:67:
         19:cb:96:e4:87:6b:15:66:fe:fd:ef:3b:99:1b:6d:42:62:dd:
         3d:fd:d5:40:69:ab:eb:a2:f0:1d:f7:de:ba:91:27:2d:63:9a:
         3b:93:c9:6e:eb:62:fa:f5:e6:ac:27:22:57:77:a0:37:e3:8b:
         33:b2:8a:1d:87:06:f9:a9:e0:95:6c:ae:43:bc:4a:9a:52:2f:
         27:c6:53:00:f6:b9:f4:ed:88:be:58:ca:f3:bf:80:44:ea:38:
         2f:83:40:03:d4:ba:e0:5d:14:f3:f8:e8:51:b4:bc:a7:ed:29:
         e9:da:8e:b2:9b:53:fd:5e:02:99:ba:43:88:45:fb:7f:79:a5:
         02:4d:42:88:48:95:2a:fc:37:6e:1e:4a:55:41:ea:fb:dd:1c:
         94:04:b4:5d:c3:67:d6:e3:b6:33:cd:b2:c4:b9:52:28:b2:b2:
         f5:e4:bd:5b:4a:50:5c:60:54:11:52:03:ae:26:c9:93:22:e8:
         9b:ae:05:19:39:d8:36:c4:98:9a:df:c2:1f:1f:41:e1:d3:72:
         cb:38:5c:7f:0e:0e:e0:92:70:fe:d1:d4:ed:36:83:d2:7a:4a:
         4b:04:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:50 2025 by rpki-client