Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
File:                     34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa (raw, json)
Hash identifier:          skU67cKRUFxZ5ldDZAyv3JW/KWTr2REhm4Uec7HEmNs=
Subject key identifier:   17:3E:50:5D:CF:E6:CA:42:3F:8A:93:10:67:A1:EE:45:0F:4A:67:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF645510B1D1BDD26A680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2607:f160:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f6:45:51:0b:1d:1b:dd:26:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7e8be7b7-9252-4169-9cce-5812d430c7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:8b:16:46:3f:36:73:ee:e0:8c:11:3f:21:
                    a8:40:94:75:f2:6f:3f:cd:04:34:b9:93:5e:0d:2b:
                    5f:91:a5:ea:0b:1b:09:03:4a:8d:52:5f:fa:d1:e6:
                    b8:44:d9:df:ea:d9:fb:d2:61:e4:6a:61:e8:60:5a:
                    c3:a4:f3:c7:68:0f:ed:13:8a:dd:1a:6a:48:c8:e6:
                    6b:58:5a:94:22:19:4d:bc:3e:6c:b0:b7:60:68:e2:
                    11:d7:2d:93:46:e4:80:07:61:e8:8e:ee:e3:38:b9:
                    06:30:c1:48:c8:46:0f:ea:41:a8:36:e3:34:87:8d:
                    03:5b:c2:30:52:77:5b:eb:4d:a8:e3:bd:5d:c2:04:
                    07:ce:4b:8d:27:4a:0c:95:ea:66:85:9e:b4:80:95:
                    dd:cf:86:26:46:39:6c:2b:fd:d0:9a:77:1d:64:2e:
                    e4:2c:ae:79:e7:12:84:29:af:3a:83:6b:7c:bb:1a:
                    71:b9:e9:e6:57:00:33:fd:7f:47:47:be:85:b1:5d:
                    0f:d6:67:0a:8c:d4:62:6e:08:6f:c6:e1:87:b4:74:
                    83:22:c6:47:80:5e:43:0d:69:a1:12:b6:23:23:21:
                    c8:89:ef:a7:e6:aa:76:be:65:75:f0:75:b2:29:db:
                    e4:69:57:0a:08:29:21:8f:dd:46:50:89:64:9f:71:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:50:5D:CF:E6:CA:42:3F:8A:93:10:67:A1:EE:45:0F:4A:67:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a08d4d-df68-3fc9-bd9e-5df34a463c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:f9:09:63:6a:2c:a1:bc:bd:d6:32:87:43:c0:1f:62:0f:
         22:b8:19:ff:02:ee:19:ec:15:cc:d3:76:3c:38:fb:30:f3:45:
         bb:10:2e:49:a0:58:11:bd:89:22:da:b5:bc:94:4c:5f:e7:95:
         44:0b:2c:e0:99:46:6b:b1:8a:f8:18:de:22:6b:e1:e4:9a:cc:
         02:01:65:9d:7a:0c:f7:b2:fb:29:70:18:5c:e4:b1:13:15:8d:
         6c:97:03:00:84:05:62:33:66:6b:a7:ba:8b:46:6f:2f:01:71:
         99:bf:de:40:c1:73:37:e4:fd:1b:03:57:f8:1d:8f:76:a2:f0:
         c1:60:34:1a:fa:01:c6:74:ee:b9:04:14:fd:8b:d7:35:31:61:
         b7:b4:44:c6:36:d0:b8:a6:37:67:a7:63:43:63:4c:51:2b:f2:
         75:ee:cd:dd:bd:cc:ed:29:c3:24:82:a2:b9:d5:23:a0:3e:64:
         4f:90:b5:ff:b4:ac:a4:85:87:b8:69:cf:6c:fa:97:e7:f0:66:
         ac:eb:65:92:ca:b3:25:ca:ec:f4:79:d3:a7:90:4b:2f:fb:f8:
         25:f8:86:ed:ca:66:6f:b6:f3:0f:5f:2c:5d:6e:27:c2:a3:7f:
         f8:2e:6c:99:3b:82:73:f1:67:8f:0c:7f:50:ae:a7:00:bb:6e:
         0b:e7:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:01 2025 by rpki-client