Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0634a9e6-4c66-3dbf-bd85-f76cc8b60d31.roa
File:                     0634a9e6-4c66-3dbf-bd85-f76cc8b60d31.roa (raw, json)
Hash identifier:          wBazigy1umWfRUR8qec96fw1950q00JwLta4SV9MHC0=
Subject key identifier:   1D:37:5F:E4:FF:4B:F0:B4:5E:E8:1B:76:2A:23:41:99:A5:A5:82:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295586A1D46C5BD89573F200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0634a9e6-4c66-3dbf-bd85-f76cc8b60d31.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1016:b148::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:86:a1:d4:6c:5b:d8:95:73:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=d5b3984b-f096-41b8-be2d-4df25b83ab3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:14:3e:d7:dc:58:83:ec:eb:5b:05:58:e1:
                    17:d6:7e:f4:50:75:0c:4d:df:ac:16:91:e9:6e:7c:
                    62:9c:01:59:7b:55:16:d1:89:34:da:11:14:17:a9:
                    95:1c:98:66:b5:ce:0c:7a:aa:ce:70:ea:f6:d5:f6:
                    68:1d:0c:a2:e9:d2:2e:ab:1c:2f:9c:c7:cd:7a:06:
                    ff:36:28:6c:e0:83:41:b3:fb:11:e4:f0:91:9f:28:
                    38:72:29:00:ef:b7:56:3d:14:cd:67:e2:6d:b5:19:
                    b2:90:e1:45:bd:b6:05:e8:48:75:fa:14:fb:fe:1f:
                    7a:71:cc:0f:f1:88:6c:2c:3d:3c:4b:6e:58:b6:f3:
                    8f:1c:bb:38:7a:2d:1c:b0:94:db:8f:e7:ba:cf:d3:
                    0c:30:06:de:31:a1:89:57:2e:22:6a:6f:d6:cf:18:
                    8c:96:5d:99:c1:6c:10:f5:38:98:be:44:98:5e:36:
                    c1:29:88:b7:16:5b:46:2d:9d:3a:ab:1e:36:56:ce:
                    26:62:3f:31:16:11:4a:46:48:7a:0c:d2:20:70:9f:
                    bc:cc:ed:bf:3d:aa:3a:cf:2d:44:e1:03:08:b5:bc:
                    9c:4d:ff:37:f3:56:42:9d:91:ff:59:57:e0:0c:ed:
                    9c:60:84:e0:8a:3b:a3:97:00:eb:59:5b:19:e2:aa:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:5F:E4:FF:4B:F0:B4:5E:E8:1B:76:2A:23:41:99:A5:A5:82:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0634a9e6-4c66-3dbf-bd85-f76cc8b60d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b148::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:27:3d:eb:86:0c:c6:1c:2e:22:2c:a3:d8:8f:7d:cf:16:
         ab:e7:e9:1f:a6:5b:7e:f4:52:8d:24:4c:8b:b8:bb:09:86:d5:
         28:0b:18:06:39:1c:22:79:0f:9d:45:56:89:b2:65:4e:41:ab:
         be:6f:09:19:2a:7a:5e:a3:bc:20:f0:5c:fc:7a:2a:8f:a5:aa:
         d6:3b:81:27:8a:34:d9:2e:64:dd:43:6b:bd:2b:ef:63:2c:43:
         84:26:60:00:44:83:ad:3f:d6:b9:df:32:3c:04:c0:40:39:cf:
         c1:c5:27:80:99:10:8d:b8:62:df:dd:99:85:b0:58:05:e3:54:
         b4:fd:08:dc:d9:31:3b:80:75:f1:a0:65:e4:b7:82:b5:ce:c2:
         06:52:7e:9d:d5:51:e1:e8:f9:5a:ad:3e:d8:c9:9e:21:f2:97:
         fe:93:c3:2c:22:68:a9:0b:65:43:a7:78:91:ac:f5:43:f9:b2:
         09:aa:ba:10:7c:1b:7b:89:cf:ba:96:78:db:b5:0e:f3:5f:da:
         41:62:88:f8:ba:7b:29:01:be:b6:29:bc:a6:2e:69:53:a4:7f:
         09:e2:03:95:44:a9:7c:0f:23:4a:fb:94:04:79:58:c9:75:02:
         99:36:32:f3:ba:c4:83:df:f4:49:9d:b6:dd:d2:b8:d4:45:15:
         58:64:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:45:11 2025 by rpki-client