Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17fb50dc-2e04-31be-a373-95f0f6adfc94.roa
File:                     17fb50dc-2e04-31be-a373-95f0f6adfc94.roa (raw, json)
Hash identifier:          +9B4SKf4Nmw53MYiyoDqNNfWcKzHzJIpX9WbiEGXtog=
Subject key identifier:   DB:E8:AF:8E:6C:53:79:15:CD:B3:12:FC:E7:A9:FC:5B:29:C6:56:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A06AB95492EC1170F6EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17fb50dc-2e04-31be-a373-95f0f6adfc94.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100f:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:06:ab:95:49:2e:c1:17:0f:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=5b321a93-3f71-4bc9-830a-e51936b8a42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:b6:f7:41:48:da:29:6b:85:e5:a1:be:80:
                    d9:07:4e:01:bb:f6:85:22:62:58:3e:a1:92:68:4c:
                    48:9a:77:1e:13:e9:69:a6:07:a2:09:65:00:b5:24:
                    e6:41:80:5f:79:30:e2:22:9c:57:21:8a:4f:7f:6d:
                    a5:8c:76:d9:c7:2d:32:a4:dc:4b:04:4e:95:be:dc:
                    48:f4:b3:80:7d:73:16:3f:14:61:ab:6d:66:cd:52:
                    f7:cc:aa:f1:c1:2e:ee:6b:7d:69:aa:3e:18:b7:41:
                    89:0c:9d:0a:7c:53:14:a2:4f:11:95:51:a5:0f:74:
                    a7:6f:47:4f:09:28:b8:3f:d6:6a:d7:8e:49:e1:a1:
                    75:e0:a4:dc:0f:f5:2a:fe:31:00:47:10:51:6b:cf:
                    33:13:e9:4f:2a:05:46:98:ed:1f:79:5a:8a:e6:a6:
                    c7:6a:7d:4b:41:96:9a:bb:be:4d:93:0d:37:d8:b1:
                    ec:92:34:9b:84:1a:a1:ab:76:b4:0c:10:f3:ae:84:
                    20:a0:d2:60:c1:e2:9d:0c:d3:67:57:d3:c9:bd:fd:
                    e5:44:d2:d8:5e:db:a2:32:8a:9a:1a:bd:6a:83:78:
                    3b:14:35:ab:32:90:c6:42:9a:05:10:ab:3e:9b:ac:
                    b0:17:b9:4c:93:4d:8c:ca:d8:f0:87:50:a2:b2:15:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E8:AF:8E:6C:53:79:15:CD:B3:12:FC:E7:A9:FC:5B:29:C6:56:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17fb50dc-2e04-31be-a373-95f0f6adfc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:0e:21:73:8e:3c:38:ed:ce:c7:fd:1f:56:92:34:96:90:
         17:ca:3e:7f:0c:2f:e6:8a:c7:9f:65:fa:d3:08:52:22:fa:8d:
         fd:8c:be:da:9c:49:df:c5:a1:de:45:a6:3f:c1:7e:ed:f1:a3:
         8e:ea:28:40:41:e4:be:b9:39:9a:44:c9:f9:7e:b9:54:5c:bf:
         d0:07:b9:07:5c:90:8a:6a:8b:ea:97:0b:1d:5c:ca:54:78:f5:
         24:6b:48:2e:f7:f0:05:dd:72:85:53:4c:71:1f:36:c2:6e:e9:
         0f:28:fe:2c:dc:36:9d:ed:ad:13:e3:f5:db:27:ac:c6:de:da:
         d1:f3:3e:ec:db:cb:3b:fc:54:17:2f:fd:e9:7f:42:93:58:10:
         2a:f5:84:ed:9d:29:a1:a2:c2:43:b6:a5:96:d1:87:4e:18:28:
         e8:1f:da:2a:d6:b4:e0:4d:67:4e:d5:13:ae:eb:a3:9c:80:86:
         12:2c:a0:73:20:52:45:9d:eb:7a:ac:9e:9a:d0:3b:05:9d:22:
         ae:95:da:9d:4d:86:7d:32:ca:50:66:fc:b4:3a:32:ed:c4:66:
         3c:81:97:f4:88:da:bf:29:c7:90:44:50:7d:a3:f3:b2:1f:e5:
         5d:67:7b:16:d1:e1:79:5f:f6:b5:f5:d4:df:4d:46:69:5e:3c:
         42:12:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:04 2025 by rpki-client