Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa
File:                     03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa (raw, json)
Hash identifier:          lpaJKUaWzTz8/+fquKUbRXroBs1hDKNQYzggWiDKtWQ=
Subject key identifier:   6A:D2:5D:DD:8E:AC:A1:3E:B2:01:40:F3:A2:E2:21:94:7E:CF:1F:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24609913342E55BED25180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1007:a020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:60:99:13:34:2e:55:be:d2:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=3c1754db-90ea-4728-9592-8e4e24a0f0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:5e:7f:62:b5:e6:48:73:f5:9d:a2:b5:8c:
                    c3:b4:89:b2:88:c9:db:c4:b3:76:b6:f8:b7:b2:c7:
                    de:37:bf:59:fc:59:8f:8a:e2:8b:7c:10:1c:09:3f:
                    78:d7:dd:26:ef:23:4f:cf:f1:7c:6a:0a:51:ae:be:
                    c6:53:dc:95:32:51:ce:e2:63:5c:2d:38:1b:4f:ca:
                    8a:3b:8a:bb:98:0c:a0:63:78:d2:22:01:a0:20:bd:
                    8c:b0:cb:5c:ed:90:33:ce:9b:43:7f:2f:8f:aa:33:
                    64:cd:1a:ee:48:df:ee:1e:88:9b:3f:2f:db:0e:8f:
                    62:40:d0:6c:a7:e6:a6:6a:61:6d:8a:fb:f6:7e:9e:
                    d5:2f:11:b3:45:a9:59:b0:9b:7f:d2:aa:19:5a:67:
                    92:de:d1:4a:91:d4:bf:69:c9:91:4c:82:49:ea:ce:
                    47:e2:47:ee:5a:48:3b:90:49:96:eb:80:aa:e5:73:
                    e8:e7:8a:5f:c8:fa:70:5f:29:dd:7c:52:22:28:57:
                    44:6e:18:b2:1c:ae:09:f0:a7:02:0b:a5:f5:47:0c:
                    66:e3:be:83:dd:2a:22:e2:dc:5b:cb:0b:ff:40:5d:
                    c8:dc:19:59:a4:1b:fd:d5:6d:03:61:c3:63:16:2b:
                    c8:f9:23:9d:db:03:1c:9e:78:0b:0f:7d:4d:bf:cb:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:5D:DD:8E:AC:A1:3E:B2:01:40:F3:A2:E2:21:94:7E:CF:1F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:d1:fa:9f:43:5f:96:d4:f8:a3:a1:75:ec:21:82:66:f1:
         b9:9a:65:ab:71:9f:dd:70:6e:af:6f:dc:95:f0:55:15:5f:4a:
         6e:25:77:39:e0:b6:96:32:80:0a:c1:2d:1d:41:3d:8d:80:4a:
         f3:0d:e8:4f:9f:14:e2:c8:41:a7:62:a3:f9:b1:18:9b:dd:c6:
         67:cb:26:fd:19:22:af:b6:36:66:e1:bf:d5:33:b9:84:63:44:
         1d:e9:31:58:e8:19:a8:05:b3:f4:22:66:9d:a9:bc:c8:24:87:
         eb:7a:4a:d0:27:17:05:f0:4f:89:79:00:29:ea:ca:3d:b3:fb:
         f6:d5:c6:1e:31:05:39:dd:21:b2:4a:7e:f8:d6:e0:df:6a:88:
         30:0c:7e:34:cd:7e:18:8b:88:4e:81:b2:f0:13:27:77:aa:3b:
         66:01:7e:d4:43:5f:89:ed:2f:f5:08:15:d1:5a:77:02:3f:12:
         48:14:20:9b:93:ac:28:e5:12:2a:b4:d2:f9:9f:fd:57:d6:56:
         bf:9b:0b:7f:69:ed:cc:f3:c1:7e:b6:87:29:bb:cc:74:ce:41:
         cd:fd:0a:07:3f:ec:43:f6:95:d4:33:0d:d0:ee:2e:b4:01:ab:
         44:73:04:24:ac:8c:a0:4b:83:53:ac:30:0d:7d:06:52:af:e4:
         bd:71:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:49 2025 by rpki-client