Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa
File:                     78a1bda0-ae43-3902-a0da-6d222007ab54.roa (raw, json)
Hash identifier:          To+Agc02/FrtsHAaLtp4Ama8A6I6dXO1b2e0pk3e8IM=
Subject key identifier:   65:E9:F6:74:D0:AC:6A:AA:73:4E:9B:E2:DD:65:0A:89:37:95:93:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B438E5B99DA9ABC198780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1000:b0a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:43:8e:5b:99:da:9a:bc:19:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=e029f8ec-5a42-415f-b502-d31a00a27a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:37:2c:8e:cd:f0:1f:29:48:6e:38:64:81:
                    a9:5e:5d:52:38:27:0b:9c:93:90:13:01:dc:fa:eb:
                    39:2a:6c:e6:eb:bf:b1:ed:ff:a5:fd:ec:c9:fc:46:
                    2e:bd:d0:db:4f:e1:14:0d:61:cd:2c:c2:4d:78:b6:
                    b2:f1:7d:ab:5c:94:64:3a:53:ca:cc:f8:fb:11:ce:
                    cd:c7:e9:5a:d7:00:56:fc:3a:a6:2f:0b:2b:29:69:
                    6b:00:91:ee:d9:e1:bd:06:81:4c:0d:bd:fa:e7:44:
                    f7:6d:86:e4:7f:07:8b:6a:7f:60:0a:d7:cf:19:4c:
                    a4:ea:3b:44:90:7e:5f:5d:a8:8e:48:66:4a:49:f5:
                    5d:99:e5:21:75:5a:a5:e8:eb:01:b4:31:df:b5:e6:
                    df:53:81:a6:60:47:f7:1c:52:08:84:51:2a:7e:2a:
                    b8:64:75:50:f7:8a:48:ed:50:fd:6f:6f:ae:21:d9:
                    35:2c:27:f0:01:d8:63:b2:4b:32:9f:3f:2f:d2:e0:
                    e5:3b:1b:12:1a:f6:65:d4:95:a5:3f:54:0c:25:be:
                    61:34:33:f2:89:50:6e:42:51:8d:32:78:b8:99:13:
                    85:e1:81:ca:d7:fe:05:bc:05:33:94:e5:3c:8e:70:
                    34:d6:55:72:75:36:3b:eb:21:27:f2:51:d9:38:c6:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E9:F6:74:D0:AC:6A:AA:73:4E:9B:E2:DD:65:0A:89:37:95:93:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78a1bda0-ae43-3902-a0da-6d222007ab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b0a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:c4:8d:2e:fb:59:0a:d3:d3:13:50:11:c1:a2:5f:4b:5c:
         32:5d:0b:53:f3:e6:2c:94:9c:85:d1:de:2f:c0:6e:e1:f6:3b:
         f0:d7:2e:e0:d1:13:5b:c7:91:e1:d6:92:11:93:99:35:d7:d0:
         3a:57:3f:ee:e1:fa:74:9d:ee:fc:6d:a2:71:7d:23:09:ea:4b:
         1f:a1:09:05:0a:2e:2c:6e:b4:bc:4a:92:3a:b1:3e:c2:17:e7:
         bd:10:fb:29:7c:1d:64:60:09:ac:fd:eb:ed:53:b0:8e:c6:d2:
         da:d1:c3:f2:0a:c5:da:41:7f:55:78:8e:0b:3e:17:d9:28:7f:
         e8:e0:cc:f3:2f:e3:12:da:b7:f9:6b:75:5a:b1:63:6f:27:b8:
         b6:a1:07:e5:e1:6d:de:0d:69:a8:23:9d:b4:ed:62:0e:ce:7d:
         e7:98:a2:3a:8c:08:86:e0:b2:ad:47:8f:99:a7:eb:a8:59:f4:
         6b:0d:e3:5d:a8:ec:f0:eb:41:a0:8e:24:98:91:de:a5:ab:c8:
         6e:fd:e1:92:65:b3:28:68:d7:02:10:2e:ed:ba:b1:9c:2c:15:
         99:2e:56:54:17:1e:3e:1c:b3:63:60:52:2c:6e:ad:32:2f:1a:
         3d:68:f7:a3:fc:6a:13:f5:dd:35:fd:34:f2:42:c3:40:5e:f8:
         f9:c4:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:48:05 2025 by rpki-client