Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa
File:                     269868aa-a50e-3e36-af9b-7922dc8a522c.roa (raw, json)
Hash identifier:          vrzOD4lY8lgHyzKi0+6yS4LUyGm+/sSm1xPc6dAK6M0=
Subject key identifier:   49:54:D9:D4:93:7A:6F:44:F7:00:4F:AC:E7:45:FC:8F:AB:91:FE:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C248AAA6FE01ECFB18B55C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:b310::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:8a:aa:6f:e0:1e:cf:b1:8b:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=198cf4ad-c9c8-4119-8cf3-bb39a0dd0437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:d1:64:5a:99:7b:19:66:a4:56:48:d4:f0:
                    fc:e8:1d:7e:8b:8c:fc:a6:dc:63:d1:60:80:a5:0b:
                    a3:7b:8e:8e:dc:dc:fa:8a:93:57:f9:4e:81:6c:ad:
                    84:09:f6:37:99:1e:0e:1e:56:1e:3e:fe:b3:e7:98:
                    08:44:fe:aa:47:ce:46:50:98:22:72:c3:eb:26:00:
                    b1:a3:14:1b:7b:c0:3c:02:db:a3:49:e4:fd:cd:af:
                    35:5a:6c:7f:7f:2b:33:f2:b1:3f:7e:69:19:06:b5:
                    42:5a:4f:fd:d9:db:51:c3:42:a2:b2:7d:db:9f:78:
                    22:a3:6f:b4:9d:59:f4:e0:aa:c3:2a:ca:1f:4e:26:
                    f4:5f:ec:8c:f0:1c:cd:28:c9:e5:9d:32:d8:21:21:
                    2b:57:bd:91:f5:87:ec:20:c2:bc:01:1e:be:ae:1e:
                    10:da:35:2a:e0:f5:3a:31:d9:f4:81:9e:df:15:8c:
                    6c:f3:c8:21:c2:ad:f4:1b:02:b5:64:0f:17:38:56:
                    59:68:6e:4d:92:f9:a9:b1:b4:a7:0e:ee:10:06:0b:
                    80:ac:ed:4c:da:db:00:f0:fd:4b:04:f6:48:83:13:
                    1b:61:2b:25:94:9a:1d:2d:56:5f:ad:7f:3a:a4:74:
                    95:d6:53:17:3c:a8:bf:78:b6:8d:9f:4f:b1:9d:63:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:54:D9:D4:93:7A:6F:44:F7:00:4F:AC:E7:45:FC:8F:AB:91:FE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b310::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b5:a9:9d:98:74:0e:f5:6b:71:6b:b8:6d:7e:f7:9e:ff:92:
         6d:b8:89:e3:ee:a7:27:3a:e0:38:98:39:d5:9a:ce:39:18:00:
         28:3e:55:ee:a5:73:a3:c2:56:99:2f:01:51:32:c0:7e:ab:15:
         65:fa:8a:cd:b7:e2:d0:46:0a:57:92:b4:40:9c:ac:29:39:45:
         78:6c:c4:5e:a7:f7:ae:2a:bf:2d:b6:8e:47:e6:eb:87:1c:fb:
         53:1f:83:cd:a7:14:21:3d:41:87:f3:75:2c:c2:fb:45:07:e6:
         a8:55:15:b2:cb:e5:55:53:03:55:18:52:2f:f0:fb:3a:5e:1d:
         bb:cb:25:d5:cd:cb:a2:1d:71:b8:31:e0:c9:a0:5d:52:75:45:
         f9:bc:6c:f4:80:a8:96:20:d6:dd:59:c9:c9:f4:c5:6f:7f:99:
         13:3c:ec:97:3b:f6:e3:99:1b:41:f3:41:1b:fc:ad:72:07:46:
         b7:d9:7b:02:dd:db:ba:ff:45:78:47:2d:bc:d3:34:b2:05:9b:
         fe:96:9e:2d:05:ab:c2:a0:d6:40:97:da:50:95:40:5d:4c:3f:
         00:92:34:d8:af:51:b2:7d:0b:a7:15:e4:0a:de:b8:ff:7a:c4:
         29:4a:1c:e7:f5:c7:b0:21:75:c0:95:67:fb:e0:34:bd:90:f8:
         73:8a:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:00:31 2025 by rpki-client