Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa
File:                     38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa (raw, json)
Hash identifier:          aKc9NrBQUSI1i4ftZemsl7EVhMmF4jCpHIExKrYAyHE=
Subject key identifier:   AB:CD:13:17:C0:E9:4C:03:C4:F8:ED:83:93:B6:F7:43:76:C4:21:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4C684CF0C1696F3D9BD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4c:68:4c:f0:c1:69:6f:3d:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7d38fb9b-e99c-49d0-968b-d0f4c58586b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:e6:ec:a7:e2:4d:e0:e3:5e:7b:05:e1:e2:
                    5e:f3:c2:a6:5a:30:46:14:51:8b:b0:20:7b:02:27:
                    02:0b:dd:2b:37:82:d8:d4:c2:97:af:39:e3:36:b7:
                    56:47:a6:c2:30:ab:cc:47:88:b0:78:30:e4:43:66:
                    dc:35:1f:c9:be:d2:03:ba:ae:20:ac:7f:9b:3c:1a:
                    cd:b2:82:34:b4:7d:fa:09:77:ca:8c:18:7e:4e:de:
                    1e:91:13:f9:03:ae:5b:d0:9f:b2:0f:3e:da:b0:57:
                    27:cc:b2:22:b7:0d:1c:ac:cc:17:5d:61:83:71:db:
                    8b:e9:21:16:db:69:8a:94:57:07:4c:c8:99:55:89:
                    a8:43:d8:e8:46:30:d4:e4:07:1e:b3:cb:15:79:6c:
                    45:91:6c:4f:2e:92:22:4f:fa:d6:8c:80:57:5f:3e:
                    3c:2a:14:2f:1d:9e:db:21:4c:89:10:9e:4e:17:be:
                    47:09:a8:07:5e:23:fe:57:f1:30:19:9d:ca:85:5c:
                    db:81:4c:c4:20:6a:9f:b1:f7:60:8f:ce:9e:1c:94:
                    6e:d3:22:21:8c:46:81:de:df:43:03:a1:15:63:83:
                    fa:a1:d4:1b:66:34:09:68:0a:bf:60:45:53:e4:4a:
                    46:dc:cf:35:36:23:f7:60:18:fd:18:53:41:4f:6d:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CD:13:17:C0:E9:4C:03:C4:F8:ED:83:93:B6:F7:43:76:C4:21:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b248::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:af:2d:5d:dc:b9:12:d5:9b:6c:fc:e1:d8:0b:8c:f1:73:f3:
         1e:5c:76:a8:e8:d6:a1:5a:36:b1:e5:4e:66:44:87:3c:dd:22:
         d2:5b:19:b1:62:b8:25:92:bf:3a:cb:a8:1e:cd:10:50:69:20:
         76:b3:59:e9:7f:69:86:08:e5:81:f7:d7:aa:c7:ba:b0:52:35:
         92:e5:af:00:4e:c2:22:75:d7:b2:dd:56:5e:74:7b:7f:9b:37:
         90:43:ea:48:1a:59:18:13:07:2d:fd:ac:bf:e3:d5:21:62:97:
         e3:57:7c:7a:75:2c:9e:b9:b7:ce:54:27:81:45:99:17:17:86:
         21:c3:55:bd:97:dd:fe:5b:c7:eb:2c:bb:49:5c:39:29:05:6c:
         83:7a:bf:99:29:5b:3d:84:9a:b2:3a:1e:55:e3:14:5d:33:70:
         87:c9:61:b7:1b:a2:0f:8f:67:f6:a5:6f:39:93:c3:b7:56:18:
         74:62:fe:d3:e7:6d:1c:3f:e3:54:3a:f1:cc:71:69:c1:b0:78:
         cb:d0:3e:e0:30:00:d1:59:7a:f4:0b:5e:48:99:0b:a7:a2:32:
         16:14:6a:55:f9:c6:81:25:dd:5f:da:e7:a9:e8:d7:05:7c:84:
         62:8f:dc:0d:15:6f:d7:d0:77:68:11:82:d2:e2:d9:fe:a1:d3:
         b3:23:d5:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0xoTPDBaW89m9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
N2QzOGZiOWItZTk5Yy00OWQwLTk2OGItZDBmNGM1ODU4NmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwinm7KfiTeDjXnsF4eJe88KmWjBGFFGLsCB7
AicCC90rN4LY1MKXrznjNrdWR6bCMKvMR4iweDDkQ2bcNR/JvtIDuq4grH+bPBrN
soI0tH36CXfKjBh+Tt4ekRP5A65b0J+yDz7asFcnzLIitw0crMwXXWGDcduL6SEW
22mKlFcHTMiZVYmoQ9joRjDU5Aces8sVeWxFkWxPLpIiT/rWjIBXXz48KhQvHZ7b
IUyJEJ5OF75HCagHXiP+V/EwGZ3KhVzbgUzEIGqfsfdgj86eHJRu0yIhjEaB3t9D
A6EVY4P6odQbZjQJaAq/YEVT5EpG3M81NiP3YBj9GFNBT21DOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKvNExfA6UwDxPjtg5O290N2xCGTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzhmMjkyNmQtMzdlOC0z
ZGJiLThiMzgtMzlmMmJkYWY4N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBLJI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFOvLV3cuRLVm2z84dgLjPFz8x5cdqjo1qFaNrHlTmZEhzzdItJb
GbFiuCWSvzrLqB7NEFBpIHazWel/aYYI5YH316rHurBSNZLlrwBOwiJ117LdVl50
e3+bN5BD6kgaWRgTBy39rL/j1SFil+NXfHp1LJ65t85UJ4FFmRcXhiHDVb2X3f5b
x+ssu0lcOSkFbIN6v5kpWz2EmrI6HlXjFF0zcIfJYbcbog+PZ/albzmTw7dWGHRi
/tPnbRw/41Q68cxxacGweMvQPuAwANFZevQLXkiZC6eiMhYUalX5xoEl3V/a56no
1wV8hGKP3A0Vb9fQd2gRgtLi2f6h07Mj1UA=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:37:50 2025 by rpki-client