Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74dada3c-b675-3a79-a1a0-46b6a2ca3ac6.roa
File:                     74dada3c-b675-3a79-a1a0-46b6a2ca3ac6.roa (raw, json)
Hash identifier:          XgKubGIWDfS/IdO6FX3q8WITnsV72hTVDlcbyY5m8YQ=
Subject key identifier:   4A:55:2C:AD:23:77:59:CE:B5:57:71:35:24:AC:01:B5:09:CE:7E:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B459CB789C27A65F53280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74dada3c-b675-3a79-a1a0-46b6a2ca3ac6.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:45:9c:b7:89:c2:7a:65:f5:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f9db4518-edc4-4b97-a221-e9d05b6b38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:7a:aa:f2:ec:a8:f7:13:58:8f:08:21:7e:
                    0b:52:02:ba:2d:99:02:f5:f7:0b:b4:81:fe:27:9a:
                    a5:6f:e1:b1:6f:42:73:d5:69:15:fc:59:76:ba:cb:
                    ce:cb:02:3f:80:10:e6:6e:80:7c:0f:8a:5e:57:29:
                    51:40:69:60:18:fc:52:7b:5d:e4:de:00:1c:c8:4e:
                    29:1a:5e:b2:73:93:6a:a5:06:ec:48:78:72:3f:b1:
                    e0:12:db:bf:26:c0:95:f4:d1:dd:59:7f:0d:9e:6a:
                    e8:56:6d:a0:ca:ca:48:b2:b7:07:bf:09:74:bb:c5:
                    00:96:4c:a5:e9:8c:e0:a6:32:cf:ea:ec:9b:62:74:
                    54:14:5c:c1:1d:bd:36:98:09:77:dd:7e:b8:3f:f1:
                    9f:fc:52:92:52:e6:7b:c5:ad:3f:f8:c9:6a:53:1e:
                    86:61:78:28:c8:bd:ca:44:f4:36:4b:1a:be:32:f8:
                    e6:52:9f:69:43:22:05:d9:bc:b0:b1:24:34:f2:10:
                    f8:af:ae:31:67:e2:f7:07:55:50:a7:95:45:43:69:
                    4b:d0:3a:d1:16:fe:6c:47:2a:dd:11:ef:10:b0:74:
                    fc:a7:78:b0:91:64:d6:47:ce:d1:dc:b6:a2:33:6a:
                    70:ac:2f:e4:7f:92:39:7d:df:f3:f6:3b:0a:9f:65:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:2C:AD:23:77:59:CE:B5:57:71:35:24:AC:01:B5:09:CE:7E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74dada3c-b675-3a79-a1a0-46b6a2ca3ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:20:b9:ab:fc:ac:d4:3b:8c:d8:c0:69:3b:fb:6f:53:a3:4f:
         95:14:6c:59:50:f6:7d:ab:35:0e:07:1f:b2:34:89:d7:c5:d9:
         36:4f:29:96:dd:20:d7:07:5c:86:84:63:85:9d:a5:c1:ec:42:
         1a:4f:ba:47:46:fc:1c:d9:be:a0:c7:f2:1b:98:53:0e:26:bb:
         97:0a:21:11:81:a0:21:7c:ed:f6:c8:27:9b:0a:ac:c4:ac:8b:
         f1:14:6a:7c:a5:68:10:df:6d:aa:16:98:3f:0f:3a:17:8e:ff:
         78:67:e2:fc:ea:19:da:72:cf:67:a8:dd:bf:e7:cf:cc:fe:2e:
         e1:99:3c:95:29:44:84:2c:e9:34:41:f2:5d:bf:f8:ac:8f:e3:
         e7:d9:aa:18:a7:d8:76:7f:bf:ab:86:43:32:d6:a9:61:59:c5:
         e6:94:d6:f9:41:09:0c:10:0c:71:f5:eb:4e:7e:f9:43:1d:cb:
         fb:5b:9e:2e:40:0b:13:7b:c2:9d:2c:c5:ad:1e:3d:dc:d2:04:
         bb:99:b9:91:51:af:e5:41:9c:b5:ae:fe:79:48:23:c8:00:2c:
         e4:9b:bf:f8:80:bf:63:28:80:47:8a:75:14:8c:e5:3a:af:50:
         e5:cd:a8:fe:ba:a6:1a:b2:a3:45:cc:e5:fb:f6:93:e9:b2:28:
         08:5d:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:47:00 2025 by rpki-client