Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/377e1e50-f5c1-399d-9743-ec0ff39e1b22.roa
File:                     377e1e50-f5c1-399d-9743-ec0ff39e1b22.roa (raw, json)
Hash identifier:          d/lt3mcxRrkqumNp4/jAya4TR0y85DZypgNUNSSPBOQ=
Subject key identifier:   3C:BC:2F:46:10:73:E7:B8:AE:C6:65:02:53:2D:03:84:0A:57:1A:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1DD6F52EDF9DA6AA06F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/377e1e50-f5c1-399d-9743-ec0ff39e1b22.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1007:a111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:1d:d6:f5:2e:df:9d:a6:aa:06:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=bc14f9a4-81b5-4e44-8b6d-eccac0adb871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:be:ce:d3:51:42:23:e1:f5:90:37:1c:8d:
                    45:71:c2:a1:20:46:fa:4d:f6:ac:26:b6:39:b1:de:
                    ef:96:60:3d:06:c0:d1:c3:f6:aa:b9:b6:ab:72:02:
                    b3:2c:ac:0b:54:f2:fd:e1:45:06:e0:73:99:00:8b:
                    95:10:56:cd:15:1e:16:eb:2c:53:8e:6a:7c:39:10:
                    5e:e0:1a:7e:73:b8:fc:7f:4c:62:0e:b3:6a:44:90:
                    29:6f:df:d4:67:87:ad:42:47:e0:64:fc:c9:b4:49:
                    b0:51:f7:c4:49:ee:40:e3:32:2e:26:e5:a4:a9:6e:
                    32:10:eb:f3:c5:a7:28:09:0c:2f:0e:4b:b7:34:91:
                    a9:02:59:ba:08:e4:8c:e9:d8:01:6c:58:6a:33:1e:
                    d9:11:c1:13:25:44:d0:7c:7d:57:f4:23:87:a5:a3:
                    71:e4:15:0a:ee:5d:a5:f2:23:bf:49:03:5c:94:a1:
                    a3:79:34:92:11:30:f8:62:75:76:2d:53:8e:24:56:
                    7d:be:35:a6:42:1b:fa:d6:65:08:0c:0c:82:05:cd:
                    02:f3:00:7c:f4:65:ef:6a:59:fc:95:01:1a:7d:4e:
                    ab:b3:a0:b5:63:f9:bf:a3:0b:b2:5d:80:c8:6a:6c:
                    56:bc:b8:7e:5b:e1:d7:fe:22:62:d3:12:df:14:2c:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:2F:46:10:73:E7:B8:AE:C6:65:02:53:2D:03:84:0A:57:1A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/377e1e50-f5c1-399d-9743-ec0ff39e1b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:9a:43:e9:23:f6:e0:04:05:15:8b:9e:a3:09:32:27:d8:
         f8:b1:cd:e0:0d:5c:52:f7:18:be:bc:77:d9:d5:6a:d4:63:b2:
         69:71:83:d5:71:a7:29:87:81:12:3d:d7:bd:af:9f:8f:bf:3d:
         7a:42:99:47:4e:0f:07:6d:b3:6c:bd:09:d3:25:aa:0e:70:39:
         83:ec:f7:e6:cc:cc:34:60:99:94:61:23:8c:88:75:3a:05:2d:
         e4:aa:3f:f4:2e:56:c9:1f:bb:97:3c:19:30:7b:4a:c3:71:0e:
         9b:9d:40:a0:fb:94:42:af:8f:6a:13:f6:17:57:07:a4:90:59:
         1e:dd:3d:5d:1d:eb:14:7f:42:18:12:24:b7:21:ae:f2:e3:6a:
         8a:87:79:cc:c1:e8:59:22:7a:74:ae:ac:0e:c6:7b:e2:90:59:
         3f:3f:2e:b6:29:da:24:0a:f7:67:4d:5f:05:cf:b9:07:76:4c:
         e8:8a:4b:eb:81:55:c5:6e:ee:00:22:30:62:e9:d7:77:87:95:
         a1:26:8c:b2:97:a9:25:18:d5:5e:7c:09:16:8d:bc:ab:d7:ad:
         e9:c5:64:f9:9b:15:ea:66:f1:d3:ff:98:67:97:71:67:20:a6:
         30:8e:72:0b:db:69:1c:ce:3c:56:1b:62:ad:32:dd:c4:97:fa:
         0f:dd:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:55 2025 by rpki-client