Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f55682f8-8be3-3267-a0b3-4f1555e6aaad.roa
File:                     f55682f8-8be3-3267-a0b3-4f1555e6aaad.roa (raw, json)
Hash identifier:          m+JCA+S4AEw5KeAAn8RaAeS9bAqu3lpvYRVWtPrrZDo=
Subject key identifier:   88:47:D5:9E:21:FE:39:8C:4E:D7:0B:0F:C4:F0:57:7D:3E:D7:84:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4AA296D83AB4ED4B3080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f55682f8-8be3-3267-a0b3-4f1555e6aaad.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4a:a2:96:d8:3a:b4:ed:4b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=92b8b9a3-2cbd-4d06-a8a4-3377eb408f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:44:70:24:09:61:43:ee:9a:ee:3e:43:56:
                    5d:bb:ca:a4:46:a8:e7:b3:65:c4:f1:b0:71:dd:43:
                    4a:4e:30:bf:82:10:8d:20:26:7e:9f:2f:e3:50:e5:
                    e9:f8:24:0c:89:10:eb:8b:b5:c7:d3:9a:0f:24:b6:
                    1c:00:f1:c8:6e:f0:96:de:cd:8c:6d:7b:b6:45:6d:
                    45:76:35:86:e9:f9:c3:7d:7b:cb:51:b3:db:ef:df:
                    bb:9d:08:b3:92:c1:6c:30:ff:a0:0f:da:f7:15:3e:
                    fa:08:96:9a:52:5a:2e:3c:03:a8:44:2d:c7:f8:25:
                    9e:5a:d1:ce:71:e5:b9:57:5e:9d:0a:33:3d:54:a5:
                    6b:34:bb:24:6f:33:de:87:27:9f:0b:89:e2:66:c4:
                    79:26:c0:41:92:00:f4:d7:a2:1b:14:98:6e:e1:bd:
                    c9:bc:fc:df:2a:0d:ea:18:1d:78:6a:fd:9d:5d:02:
                    2d:62:33:f4:01:7e:2a:54:8e:05:78:ed:9c:f5:37:
                    aa:72:7f:49:31:3c:e6:1e:3c:ec:dd:4f:8d:06:63:
                    ac:3a:63:32:9d:89:24:4e:d2:77:58:76:96:1a:2b:
                    b6:09:cf:cc:eb:6c:12:91:7a:87:71:71:ba:fb:48:
                    27:c2:96:64:e4:7f:d5:33:24:4f:a6:06:f9:27:80:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:D5:9E:21:FE:39:8C:4E:D7:0B:0F:C4:F0:57:7D:3E:D7:84:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f55682f8-8be3-3267-a0b3-4f1555e6aaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:23:5e:ac:63:55:7c:fb:d3:21:bf:35:5d:79:f6:89:82:b4:
         26:45:a2:cf:df:23:04:11:41:5e:17:74:58:54:d1:ff:79:54:
         65:8c:0b:77:11:09:bf:05:ac:fd:39:70:a0:cd:23:b3:fc:7a:
         32:6b:be:3e:ef:4d:45:3d:e8:4a:36:39:a9:ff:24:67:be:91:
         cd:29:f7:a1:ef:98:b3:86:a8:26:10:0b:67:a5:fb:b5:8b:1b:
         61:59:75:85:64:5f:e8:5b:8e:e8:62:e8:b0:62:76:eb:13:e3:
         b1:98:a3:0f:82:14:c3:89:46:ef:b6:54:df:58:38:43:42:45:
         a1:cf:5e:69:f1:53:aa:5c:20:f7:7a:7a:5d:dc:82:6a:bf:ff:
         71:95:1d:6b:ba:af:54:18:8d:fb:15:ed:4f:e4:22:f5:ab:ad:
         5d:23:f9:da:cd:81:c5:ea:7b:84:99:34:cb:85:9d:b5:73:9b:
         93:84:a5:7d:e9:56:00:ef:51:99:80:21:3a:10:81:a9:19:c9:
         31:6c:44:90:7a:f5:f4:02:b3:21:aa:83:6f:3e:13:59:f5:3e:
         98:2e:9f:8e:19:92:e2:ea:0d:81:1a:00:df:12:71:53:e3:73:
         ce:6a:00:b0:4e:69:7a:9b:cf:67:30:16:61:a0:be:cd:3b:15:
         22:e0:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:14 2025 by rpki-client