Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa
File:                     600c4168-7831-3c03-9a7c-637353bc9ab5.roa (raw, json)
Hash identifier:          nYOH2ur9rxu5JYC73ddwYZBtPi+efjeWnuL6CULG7mA=
Subject key identifier:   BD:3B:47:EE:5F:4D:45:70:F7:A4:D4:04:61:71:DF:39:1D:B2:0F:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF4720773277229773C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:801c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f4:72:07:73:27:72:29:77:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c95951c6-1376-4745-a8b0-45a427c0affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:bc:bd:66:72:15:86:53:2c:f2:90:37:bd:
                    b9:55:b2:e9:1e:57:4f:21:1d:67:08:d4:5f:7a:f9:
                    25:5c:21:6a:6b:9a:26:44:92:2d:6e:fc:d8:e0:89:
                    2d:5f:dc:38:0a:2d:ff:c9:dc:e9:af:1f:5f:d9:3d:
                    9a:34:68:9b:65:29:3a:b7:88:ad:e2:a1:9e:ac:c4:
                    36:8c:3a:1c:cc:94:55:29:76:a0:79:ae:4b:56:3b:
                    48:b9:57:67:90:6c:d8:2a:0d:0e:ca:c1:53:96:83:
                    a4:5d:15:f9:e0:b5:4d:77:4f:2b:0c:04:7d:ef:03:
                    fb:48:81:d9:7c:2d:1c:dd:fd:5e:e9:a2:e5:18:06:
                    90:82:63:2b:b6:06:07:12:15:b0:2c:16:81:67:7a:
                    8b:46:87:41:64:f7:38:a7:e4:59:1d:13:f1:e1:a7:
                    d3:30:08:35:7b:b8:c7:a0:f8:9d:bd:11:d5:3c:b3:
                    be:52:1d:53:c8:53:68:e1:f4:da:c5:9e:db:76:71:
                    84:11:47:ce:e7:29:40:fe:79:a8:ba:56:44:75:0f:
                    33:e9:d5:ab:8c:89:48:9c:b2:56:f2:3e:ab:b5:81:
                    d7:2e:c5:5e:6a:ca:25:cc:59:f8:36:e0:26:6f:a9:
                    ac:21:48:77:9e:f8:30:d3:44:ac:00:0f:30:93:ff:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:47:EE:5F:4D:45:70:F7:A4:D4:04:61:71:DF:39:1D:B2:0F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/600c4168-7831-3c03-9a7c-637353bc9ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:801c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:b1:5e:aa:91:18:9a:26:62:96:73:7e:cf:25:48:46:e9:
         c7:ab:45:52:bc:7b:86:4a:3b:83:66:0a:f0:23:96:e3:c8:81:
         ae:df:c8:fb:09:a1:52:5d:12:4b:14:56:36:ab:e2:d2:bc:04:
         64:b7:94:bd:68:10:16:2f:9c:9e:d1:14:8b:1c:1f:65:5f:06:
         42:be:d2:95:0b:35:c5:31:a6:e9:b8:b4:b5:d8:89:81:c1:eb:
         00:9f:a7:eb:57:f5:87:d9:14:a3:0d:6a:dc:db:00:98:fd:7d:
         f5:a8:59:40:a2:2b:f7:f6:bb:f6:34:fd:c3:ef:6b:3a:cb:2b:
         1a:c4:de:9c:8d:97:0e:9d:78:62:33:55:85:35:43:99:51:94:
         bf:6f:cf:3e:3b:94:02:0f:73:bb:25:34:60:ce:4d:4c:cb:5f:
         a4:cc:3c:34:26:0d:51:99:82:e5:84:fc:7c:ee:ee:08:be:78:
         db:40:ff:41:1d:b6:97:79:a7:08:4b:b6:3a:f6:3a:6c:a5:0c:
         6a:ae:92:9d:42:28:07:cd:c9:52:83:95:20:ad:ed:d6:ae:27:
         59:19:1f:5e:ce:2b:88:4b:e9:e5:08:ae:f6:9a:d2:c1:82:a6:
         82:eb:24:72:75:46:6e:22:c4:42:0c:4d:35:a9:da:31:74:d8:
         f1:43:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:05 2025 by rpki-client