Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03cb98e7-9c9b-3ab7-b1fd-7b3032004089.roa
File:                     03cb98e7-9c9b-3ab7-b1fd-7b3032004089.roa (raw, json)
Hash identifier:          crYgsVLUKP+/1XXBogmvSm85r0F/e5KW9PL34xnl7Bk=
Subject key identifier:   D4:2D:A7:60:CA:AD:29:61:1E:FD:1C:F2:38:D0:03:CC:18:D6:2D:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A12FE1B863CDBD652CB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03cb98e7-9c9b-3ab7-b1fd-7b3032004089.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:b050::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:12:fe:1b:86:3c:db:d6:52:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ccef320e-bbc3-46c5-9b27-5b1a426dfbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:79:0c:c0:de:57:37:62:85:b7:3f:38:1a:
                    a9:4f:29:14:46:2f:4c:3c:2f:ab:39:09:03:35:44:
                    50:e3:2e:a0:64:9b:8e:38:06:cc:e2:c4:d6:25:f7:
                    aa:ad:e1:ef:d5:3f:2f:0a:e3:58:da:74:44:89:0c:
                    3a:06:92:10:8c:00:00:f4:bc:fa:76:e5:dc:79:ce:
                    81:56:07:fb:20:bb:c8:a1:89:cc:18:32:5d:2f:34:
                    01:a2:b3:e7:2d:4d:6d:71:25:da:7a:d2:7b:fc:98:
                    c8:aa:9a:4d:be:01:c7:a0:c9:71:12:27:cc:0e:37:
                    c0:71:2e:11:5f:5b:de:2a:c5:6c:92:00:e2:ed:d5:
                    09:b2:04:e3:be:ee:9b:c0:16:c6:ae:17:e8:70:f9:
                    f6:c2:87:5c:69:45:1b:22:a8:df:33:ac:93:35:80:
                    ea:e5:84:5c:69:2e:12:f5:2e:64:32:70:0e:75:3e:
                    a9:a9:91:61:30:f2:50:ba:7d:30:59:a1:4c:62:8a:
                    fb:0b:6a:0c:ee:98:13:d2:92:45:e3:3c:9b:8f:81:
                    45:1d:94:cc:2a:84:ef:75:c2:5f:c9:48:ef:83:9f:
                    40:54:07:ca:12:53:4b:34:e2:3f:3b:13:8d:bd:64:
                    67:13:70:a4:b3:2b:93:1e:12:3a:e1:a1:1a:c7:b3:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:A7:60:CA:AD:29:61:1E:FD:1C:F2:38:D0:03:CC:18:D6:2D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03cb98e7-9c9b-3ab7-b1fd-7b3032004089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:1b:11:07:10:ba:29:19:fc:9b:c1:66:64:9c:0a:02:45:
         6e:3f:84:31:9c:94:94:a6:2e:cf:6d:6e:fc:ad:f0:d1:f8:c7:
         83:88:eb:8a:fb:b1:28:ff:7f:55:da:1d:e1:bc:96:eb:b9:ff:
         c8:04:a8:d0:86:c5:40:12:4a:f3:c6:f9:63:ea:9f:72:02:05:
         d0:a4:b5:e9:e0:1f:3d:56:e5:7d:93:a5:eb:4b:8d:59:83:ed:
         ff:10:f1:67:04:2c:d9:78:f5:61:a5:77:6f:8a:59:1b:df:47:
         63:8a:3a:07:96:e4:db:8f:14:f7:df:37:75:a3:01:7e:a7:c7:
         28:43:bd:af:55:97:ea:d7:9b:ee:3e:ec:6e:df:0d:77:54:c2:
         ca:c4:b9:9f:ca:af:b8:9d:f7:3a:83:c6:70:f7:c6:ee:8c:e6:
         da:b0:70:c3:84:0f:d6:2c:cc:5a:aa:63:8d:1a:08:5e:1d:72:
         39:3b:be:61:79:f6:8d:2a:a7:39:32:7a:84:31:3b:1a:f7:82:
         53:8d:35:dd:3f:59:11:9e:e9:68:3d:35:ce:b8:6a:ab:02:2f:
         7c:80:77:8b:f7:74:d9:f5:ae:62:e3:46:77:e9:91:f1:86:7f:
         8c:48:2b:19:43:f1:ad:68:f5:cb:85:5d:32:74:68:df:cf:98:
         44:df:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:52 2025 by rpki-client