Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70214c20-350b-3c04-87bf-52cd39107dd9.roa
File:                     70214c20-350b-3c04-87bf-52cd39107dd9.roa (raw, json)
Hash identifier:          Yk97c34Ck+/+RZ0l1w13teEeZnBVbDHK5KAeF5Jz9GQ=
Subject key identifier:   95:AA:65:56:34:DE:4C:BA:B0:30:45:CC:87:2E:13:D3:B5:29:7C:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B180C57D5171BDF20F380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70214c20-350b-3c04-87bf-52cd39107dd9.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1005:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:18:0c:57:d5:17:1b:df:20:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7a9894f6-543f-46d0-85ed-d18ebcbfcbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:bf:39:64:5e:d9:03:bb:2e:b3:f7:9f:36:
                    4b:e9:7f:21:fe:ce:d0:07:80:9f:e4:5b:06:10:3a:
                    52:87:36:72:e4:b4:4a:34:e9:e4:72:f8:d6:cf:07:
                    64:49:fa:ba:11:3d:3f:1c:d2:fb:8a:8b:69:57:7d:
                    70:7e:b0:f1:e2:0a:d2:63:ff:73:23:0e:d9:7a:f6:
                    1a:bd:7c:bd:d1:3b:6d:a5:b4:6e:c8:44:39:26:6b:
                    bd:f7:7f:b6:15:d7:d4:e9:99:f5:86:e7:b4:e6:7e:
                    69:24:a2:40:42:37:d6:d9:1f:63:c9:3c:8a:76:89:
                    f3:0e:4d:91:50:3f:40:75:94:2d:d1:66:b6:d9:d5:
                    27:76:2f:85:77:a5:06:32:a0:24:f1:d2:1f:cf:7c:
                    6a:71:c7:15:96:72:1d:a7:ab:1a:df:50:fa:9c:da:
                    f6:4c:66:06:d2:51:77:df:60:db:18:55:f8:39:86:
                    10:3b:da:0c:81:a2:54:2a:b6:02:bb:c8:20:d9:76:
                    c3:18:05:e1:2f:ba:0d:46:62:e8:70:cb:1f:a6:95:
                    e3:f2:f3:e1:b6:1c:ea:77:01:97:ca:c9:6c:13:f0:
                    dd:bc:47:db:d3:a4:6a:a9:28:f9:3a:a6:6f:cd:21:
                    9c:a0:b1:e7:6e:96:a3:33:5f:54:9b:64:f5:6c:a2:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AA:65:56:34:DE:4C:BA:B0:30:45:CC:87:2E:13:D3:B5:29:7C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70214c20-350b-3c04-87bf-52cd39107dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:63:f3:25:8c:3d:37:ea:5b:ab:6e:ff:ae:f8:7d:29:18:a4:
         65:2c:63:89:9f:86:30:ad:76:0a:ee:54:84:b7:f6:f0:1a:85:
         44:2c:32:50:6d:06:bc:4f:aa:0b:6d:35:74:90:c1:68:12:89:
         d1:a0:1e:9e:a1:00:93:db:9b:85:02:4c:ff:bf:f5:31:ef:ea:
         f2:7c:3e:a3:8f:c1:0c:42:0e:bd:41:ef:c6:93:aa:28:ea:c4:
         43:e3:54:1a:40:df:7c:34:d8:87:07:3b:7e:53:af:d1:70:7b:
         24:49:8b:b2:6e:cb:a2:de:05:9a:42:8e:88:ed:d6:33:d0:1d:
         07:44:07:a7:ca:46:d1:82:02:cc:a5:0f:0b:36:9e:53:81:0d:
         2d:87:02:23:aa:3f:fa:b4:45:15:4d:32:b1:a6:6d:b3:34:64:
         25:89:d5:7a:1a:48:6b:40:f3:68:9b:90:3d:6c:59:e6:77:72:
         9a:e7:34:ce:b6:e7:bf:3d:5b:23:be:6c:64:e2:35:65:ff:c1:
         20:29:50:ad:5c:ec:02:22:94:3c:f9:5d:af:6f:06:11:c1:71:
         9d:36:a9:a0:e8:98:5e:ac:e3:c2:79:ba:81:2d:a2:a6:dd:ab:
         24:68:29:71:53:80:50:62:8b:60:d2:c7:ec:ed:63:00:f8:67:
         f0:22:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:04:15 2025 by rpki-client