Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4e05f48-44bc-30e0-a28d-18a8db6ff938.roa
File:                     d4e05f48-44bc-30e0-a28d-18a8db6ff938.roa (raw, json)
Hash identifier:          IUs+QJerJMyTgPPSwqDL3nQdCw2q0t58QWofQ+V362Y=
Subject key identifier:   8C:1C:AA:1E:72:52:42:38:03:58:F9:46:CC:8E:8D:6C:38:45:37:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A2955839278B1865649541500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4e05f48-44bc-30e0-a28d-18a8db6ff938.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1015:b0b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:83:92:78:b1:86:56:49:54:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=b3189957-43ee-4687-9a13-ce424251e9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:e7:fa:f6:39:c0:c3:43:f4:eb:0a:9b:14:
                    ce:3b:a4:09:e7:f0:65:5a:b6:ee:cd:c3:bb:3a:7c:
                    02:bd:c2:ac:9a:af:b2:b5:7d:38:4d:7f:b1:b0:10:
                    e7:05:e2:eb:a6:c8:7a:88:48:85:62:bd:54:81:b7:
                    66:f5:35:e2:75:e4:7f:9d:c2:bf:51:96:fd:ca:d9:
                    b2:b8:11:da:29:5c:e7:77:f6:2b:4d:08:1e:a7:16:
                    03:7a:f7:16:e0:dd:79:07:c0:f3:db:79:16:ea:8f:
                    e3:31:8c:d8:36:14:66:15:fd:df:7b:e6:74:6c:df:
                    ab:a9:3d:cc:9c:0c:87:a7:6a:86:24:f9:9c:8c:bb:
                    33:24:34:4a:d8:76:25:08:c3:39:eb:f9:4f:2b:13:
                    8b:45:e4:50:2d:42:96:4d:1a:bb:8c:67:64:51:a7:
                    e4:b2:ca:d6:b6:7a:dc:66:bc:49:54:f8:17:d8:63:
                    7f:09:ce:03:ff:0d:f3:50:20:cd:74:45:82:f6:19:
                    87:62:45:2b:7f:aa:6c:6e:7c:4b:bf:3e:0a:ac:c7:
                    0c:27:72:99:ad:d6:0b:74:5e:9d:54:3b:d4:ca:eb:
                    72:f0:67:19:20:e1:dc:38:03:00:be:10:e3:d8:a6:
                    85:98:96:a4:0d:c8:df:7c:6f:ec:a4:de:65:c1:df:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:AA:1E:72:52:42:38:03:58:F9:46:CC:8E:8D:6C:38:45:37:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4e05f48-44bc-30e0-a28d-18a8db6ff938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b0b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:06:62:d4:5c:2e:de:ff:48:90:9b:0d:72:3e:60:4b:34:
         55:5b:9d:d6:39:65:ef:9d:0b:89:26:a1:ec:90:31:bc:ee:ad:
         5d:0c:a4:62:7f:89:87:6c:43:e4:c6:29:f1:23:b2:00:5f:6b:
         05:ca:59:e1:41:79:b6:ec:1a:90:10:a5:40:91:8d:88:84:59:
         9b:26:d1:09:44:73:a8:f7:1d:d5:7e:c7:c6:0b:db:a4:1a:0e:
         10:29:60:ec:25:5e:9a:3b:fb:81:c0:d7:9b:e5:c0:98:46:e0:
         c9:e1:80:90:b3:fd:d2:52:85:73:0a:bd:6c:86:04:35:07:20:
         be:b3:0e:9b:4f:7b:dd:c1:17:97:8a:11:3a:1e:0c:e2:52:80:
         86:c0:fc:ed:8c:ca:ae:6e:03:da:29:76:85:9f:62:9c:09:51:
         ac:cf:9d:a8:e9:2e:52:4d:e4:a9:e1:31:7a:e0:52:11:a7:71:
         df:f2:3d:a5:63:38:39:5f:c1:be:24:19:11:84:ee:81:c6:b4:
         af:4b:a4:1a:ef:5b:34:63:bd:84:88:b3:b5:92:97:48:a3:8f:
         44:8f:42:f7:e9:8c:91:82:38:64:74:9b:6f:94:15:71:1c:b3:
         c1:54:5d:ee:a8:f0:af:c0:a2:94:f9:3a:73:4b:c7:64:14:f7:
         09:a7:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:20 2025 by rpki-client