Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa
File:                     4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa (raw, json)
Hash identifier:          Kr4OaHi1OjLh+3AL/dFDveBZWGysPOC3bJmKswJDjRY=
Subject key identifier:   01:1E:67:B6:AC:FC:8E:E3:52:50:A2:27:EB:22:E4:12:94:BF:07:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1B5FF0B6E1E9DA87028C7F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1002:1190::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f0:b6:e1:e9:da:87:02:8c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=94712b45-3dec-4466-85aa-f9caa884076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:ab:bd:0f:42:3a:56:5b:cb:f6:2c:b6:50:
                    f3:c1:2f:8b:d4:0c:d0:37:9f:0f:9d:a5:bd:ec:90:
                    7c:50:4a:2c:b1:65:ab:d2:18:13:b6:fc:8f:4d:38:
                    34:2c:71:0d:eb:3d:56:28:16:7f:85:5d:37:3e:53:
                    d0:84:4e:6b:65:16:74:63:49:d5:ea:0d:40:7f:ea:
                    c9:a0:a3:e8:39:c1:00:10:5f:35:17:b6:f1:cd:f6:
                    fb:f2:45:b9:a6:e3:de:ca:07:15:b5:a8:3f:52:0e:
                    d7:e8:ac:d7:04:eb:80:cb:3c:07:17:83:03:ac:78:
                    02:3e:94:0b:a1:91:e8:ea:a9:34:15:bc:af:7e:1e:
                    ff:a4:7f:a8:d6:0f:22:2d:57:75:65:c7:06:f4:91:
                    bb:13:a1:1c:31:ae:26:29:9f:d1:a4:93:dc:e8:12:
                    42:89:43:e7:86:7b:0b:37:ce:69:07:f1:6b:2b:f1:
                    67:31:09:2c:75:c7:59:0c:c4:f8:87:cd:8a:0c:43:
                    ba:e6:ba:14:20:ba:5b:fc:00:4b:ca:1f:c2:ae:13:
                    23:8b:ce:42:0d:ce:9f:17:15:c8:8f:4d:64:1c:37:
                    3d:b7:26:af:c2:63:aa:99:bc:25:13:c6:a9:76:9a:
                    68:69:2e:f2:bf:23:50:6e:b6:04:12:35:e1:d3:e4:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1E:67:B6:AC:FC:8E:E3:52:50:A2:27:EB:22:E4:12:94:BF:07:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:1190::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:38:bf:1f:b2:4f:2e:24:e0:e5:ec:1a:7f:24:7b:17:a3:
         bd:b9:41:c6:28:1b:ee:d8:12:dc:73:40:cf:3f:c4:72:65:6f:
         8e:7e:db:b9:7e:8c:d3:d4:4f:5b:df:a4:d0:ef:a6:b7:0f:c3:
         82:2f:26:34:97:6b:5f:f0:63:b5:ec:97:b5:60:06:1a:4a:00:
         f4:7a:0d:37:6e:49:3a:b0:d4:ce:04:a7:fb:2e:82:68:51:e0:
         a1:6a:a3:77:39:f4:89:b1:6d:78:ff:51:20:b0:ac:20:e2:dd:
         d4:30:ef:38:d3:da:41:73:14:14:2a:1e:41:26:fc:48:d6:03:
         ea:c3:1e:65:6b:dc:f1:ba:b1:70:3f:fb:2a:55:db:7e:89:34:
         eb:c0:2e:a9:64:10:c9:c8:f8:c7:16:57:e4:29:74:a6:fa:df:
         2a:e4:af:02:e2:31:88:bc:05:76:99:99:d5:2a:fc:c1:b1:3a:
         ea:0f:07:99:9b:d6:22:6a:da:aa:df:d3:0c:2a:bc:07:97:bf:
         bd:4b:8f:c9:d6:d3:c0:7e:2e:56:42:0b:c6:88:64:5a:32:38:
         b4:d0:82:cc:99:44:2e:3b:f7:0e:a2:e3:be:d7:28:bb:83:1b:
         7a:65:73:ad:79:c3:ed:4c:18:59:a1:f1:36:9b:8e:4d:68:fb:
         7f:50:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:04:26 2025 by rpki-client