Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bad4c7be-b89f-3c27-ac36-b0b11189fcf3.roa
File:                     bad4c7be-b89f-3c27-ac36-b0b11189fcf3.roa (raw, json)
Hash identifier:          LQBozqikvPP7uFaYGs6FemOuePUaeISQwfVjOZWwa/U=
Subject key identifier:   5D:0F:97:88:43:C1:0D:FE:8B:74:68:DF:C6:6D:82:EE:D7:6B:63:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2480CCCB22EC56014A49C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bad4c7be-b89f-3c27-ac36-b0b11189fcf3.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:80:cc:cb:22:ec:56:01:4a:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=504d00c7-191b-4fa3-92b4-b7c07d07c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:b6:65:4e:71:06:57:3a:43:7c:fa:14:75:
                    8f:22:5b:01:6b:b0:22:e2:9a:98:24:88:83:03:0b:
                    60:15:63:9e:71:5c:e7:ed:9f:7a:69:59:d9:50:f4:
                    d2:28:ea:c5:a0:69:7e:6d:d1:a8:c6:88:7a:cb:b5:
                    8c:f5:0e:ba:90:c4:40:20:b9:d4:19:47:4c:dc:a0:
                    56:26:5f:3c:d6:bf:08:fe:b2:9a:26:c8:9c:01:a0:
                    1f:f6:e3:ae:87:18:25:d5:70:e6:5c:f8:05:82:7f:
                    00:1a:a8:db:ec:e3:4d:5f:46:7e:c9:6d:69:69:e6:
                    a7:d5:06:28:57:76:0b:05:67:f6:8c:37:f6:bf:0c:
                    78:7b:be:dc:7f:f0:41:c5:e2:a1:d8:9e:3c:d9:c1:
                    05:b0:d0:17:69:ae:dc:ab:08:62:ac:4d:47:4f:fe:
                    25:f4:33:18:98:7a:a4:e1:ad:7a:f6:0e:88:d3:a2:
                    aa:42:42:d2:70:86:34:6b:18:1f:29:75:95:b2:79:
                    3c:8d:21:48:d8:0d:92:0f:6f:56:0a:ab:3a:5b:33:
                    04:db:c8:c9:06:e4:35:49:6c:0c:a5:52:ab:4f:c9:
                    98:86:e7:5d:b3:4d:4d:21:66:52:42:45:07:80:a8:
                    88:6c:70:ff:d0:8d:6d:6b:d8:f5:1f:a0:1b:37:f4:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:97:88:43:C1:0D:FE:8B:74:68:DF:C6:6D:82:EE:D7:6B:63:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bad4c7be-b89f-3c27-ac36-b0b11189fcf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:62:8c:b2:4a:b1:04:2f:57:e7:01:49:52:92:d9:21:27:10:
         f7:3a:56:23:30:aa:a8:40:4b:cd:d0:0d:44:ff:de:a6:45:b5:
         31:44:cf:60:ec:a2:d6:86:67:6d:63:54:a9:05:54:f0:0a:1e:
         0e:3d:c1:c1:9d:61:2a:f6:e1:86:6c:bc:02:3a:15:a6:96:c9:
         f8:3c:e2:6e:92:db:2e:d6:ef:54:e7:b5:c6:b4:5e:3c:21:31:
         a9:33:90:c2:6b:ec:78:e6:a8:bd:31:8f:95:e8:5d:cc:6b:1d:
         c5:c0:87:fe:a8:d9:d7:b2:05:75:c2:1c:6f:52:6d:99:fb:3e:
         0d:23:0f:39:24:f6:bb:b5:e6:c6:22:d7:8d:7c:e0:70:e4:52:
         96:de:38:1f:d8:b4:bc:56:7b:da:93:1c:cd:60:51:75:32:73:
         54:4a:12:c5:68:9b:67:4e:c4:c5:57:1b:d7:48:20:f3:87:57:
         d4:c2:88:b4:7e:bd:6d:84:d6:a4:3b:09:13:44:1d:a7:f6:6f:
         77:b8:07:52:f3:21:a8:b4:f6:95:62:74:c9:5d:b2:64:fd:01:
         8b:3b:fe:3b:55:19:55:3c:90:24:f0:83:5a:6e:d0:62:d8:5d:
         17:b3:d3:1e:58:3c:29:13:f8:98:6d:23:c7:be:b2:0b:ee:11:
         00:77:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:40:26 2025 by rpki-client