Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa
File:                     a2c64a59-f187-39b3-a84f-4da6d91a197b.roa (raw, json)
Hash identifier:          6qHM8OPpIgnInJjrSAZ8FDYcCrXZpF6pmLgOeJvd1+g=
Subject key identifier:   E5:9F:CD:36:4A:DF:8A:B9:78:30:43:55:D5:A3:96:B6:20:BA:57:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A0463BF4497333DA43D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:04:63:bf:44:97:33:3d:a4:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=26f4795c-8ba1-4da6-bc39-2d68a507771b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:8c:00:5c:63:e9:b7:4a:c2:0e:9d:65:8f:
                    d1:b4:04:42:9c:c3:35:01:e7:48:97:01:16:27:1f:
                    d0:39:7e:fa:d3:cd:8d:24:fb:95:d9:fd:48:d0:72:
                    a0:4c:37:0d:13:fe:67:b7:35:ce:2c:e1:47:3c:81:
                    fb:5a:a1:2c:86:a6:98:a7:7a:98:0a:61:d4:00:40:
                    62:b6:05:6a:4b:6c:bd:ab:48:59:e5:91:c1:4e:6f:
                    13:fb:51:20:b7:90:a3:ef:03:ff:cb:63:a8:22:f7:
                    0d:c9:f6:92:5f:6d:06:8a:02:7a:c5:d4:c3:b9:a0:
                    14:8d:65:9b:91:87:43:71:af:e9:6c:11:ea:6f:30:
                    b5:e4:ee:95:08:99:1a:9d:ad:48:ce:2c:2f:de:2f:
                    06:67:bf:b9:cc:84:9f:7e:73:e3:a2:8b:80:64:5b:
                    82:dd:0f:62:eb:aa:4b:dc:7b:78:da:a0:9c:46:18:
                    2f:69:4e:6c:ae:65:26:ca:72:9f:c3:8a:6a:27:e3:
                    ad:6a:3e:49:f8:64:9e:20:b2:bf:93:92:6f:47:80:
                    d7:1e:5b:c8:99:e5:5a:fd:16:4a:c0:73:69:4d:4c:
                    76:7c:68:a5:cc:c0:c3:5d:75:f8:09:84:09:5a:c9:
                    3d:fe:e4:45:a6:5f:1b:fe:32:bd:b4:69:2f:0e:68:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9F:CD:36:4A:DF:8A:B9:78:30:43:55:D5:A3:96:B6:20:BA:57:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:81:c6:24:94:81:7b:77:4f:61:8c:32:19:5e:fb:63:23:
         ae:c9:48:fb:5a:92:c0:35:72:3d:ac:11:04:55:9a:7b:04:e0:
         fd:d3:f8:6b:75:d2:b7:03:4e:e5:a5:82:24:63:f6:97:d6:05:
         8b:8e:00:40:54:5c:d9:fa:c2:03:8f:b8:f1:46:db:82:8d:39:
         5f:2d:88:a7:2a:21:d0:f1:1f:b6:81:3b:8b:36:17:86:a9:83:
         82:d9:2c:70:ff:d2:43:dc:48:6c:f4:8e:0a:9c:d7:b0:7c:69:
         f0:c8:b9:8e:8c:8c:61:03:64:32:33:cd:06:50:15:7d:55:a4:
         d6:58:1f:08:d2:33:74:14:6a:a5:a2:5d:c5:72:1e:5b:26:87:
         18:4f:2c:a0:cf:99:f0:cc:22:43:48:44:cf:a5:e1:c9:c0:bc:
         50:63:da:fe:9b:3f:3e:e0:7b:de:82:74:56:f7:a7:b5:09:84:
         7c:75:5d:8c:fb:b4:f1:21:9c:91:a9:3b:92:3b:3e:4d:3c:f6:
         4b:b0:e7:27:80:07:ff:91:8a:1b:b9:91:4c:30:7e:d5:b4:0d:
         99:31:0c:5c:41:f1:68:61:bd:9a:63:ba:f0:b1:9b:18:71:6d:
         ed:61:3e:88:80:cb:1c:29:cf:7f:71:f9:68:ec:10:b7:70:eb:
         d3:c2:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:35 2025 by rpki-client