Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
File:                     d4678c89-c355-32dc-9caa-22a3b0d8248e.roa (raw, json)
Hash identifier:          ljyJn6EndVQW/5Npr64puyg1lolk09i1CJ0LTk6OJ+c=
Subject key identifier:   45:43:5D:C3:4F:91:D9:4F:EC:CF:74:DD:D6:8B:66:4C:26:3A:07:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A14ABF7917C7B39655D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100a:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:ab:f7:91:7c:7b:39:65:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=5f753d61-a663-45aa-af45-4ab39171c650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:8f:8b:9f:cf:97:5d:e5:99:b1:9e:e1:0b:
                    f7:93:f7:ff:e4:ac:62:f1:a2:80:fa:33:6f:c8:64:
                    00:9c:7f:f0:cd:8b:e7:d7:1f:0c:6e:7d:1c:ac:0f:
                    a8:29:31:bb:3e:18:3b:e3:48:89:8c:8f:ff:6d:1d:
                    1f:6a:81:3d:61:97:97:9a:8d:4c:c3:e2:0e:66:34:
                    bb:30:49:00:1c:66:97:64:46:96:39:20:6d:0c:ec:
                    4c:9f:be:cd:51:1e:39:20:4d:c1:9c:8c:ee:ea:77:
                    db:5d:e2:09:4a:8a:18:6c:95:0d:0f:8a:b5:4f:6d:
                    26:7c:2c:75:9a:e9:f1:3d:f1:84:89:03:cf:a4:78:
                    c8:ff:b2:61:cd:00:6e:a7:09:7a:a4:c2:2c:14:b4:
                    bd:69:7b:62:ae:6b:c9:84:b0:b2:df:f8:d4:54:5a:
                    7a:c2:11:16:00:d3:b7:4b:81:29:02:65:2b:eb:c6:
                    71:79:5e:98:d7:ca:29:1e:8d:20:e5:75:3c:df:cb:
                    2d:25:60:89:66:1e:35:21:32:3c:75:28:c5:d8:15:
                    47:93:3d:59:09:81:2d:4e:ca:3c:65:59:59:f7:4b:
                    ba:dd:a3:59:3d:46:5c:ae:7b:b2:b6:e3:d2:7b:af:
                    d6:1a:13:b6:3f:2a:2f:d3:77:c7:2b:21:a1:c1:a4:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:43:5D:C3:4F:91:D9:4F:EC:CF:74:DD:D6:8B:66:4C:26:3A:07:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:41:13:f4:d0:a1:2e:4a:08:ba:6b:1e:ad:3e:4f:48:12:
         35:e2:d8:3d:a5:50:83:28:3d:4e:d3:b8:fe:05:10:96:31:a9:
         2f:76:b9:a1:f7:db:8f:c3:ba:2c:98:6e:15:90:fb:9b:7d:fb:
         43:18:33:02:1f:d2:35:b7:e6:d7:fe:0b:23:ea:fa:94:4e:3e:
         3a:a7:99:b9:8c:56:e9:ac:16:c2:e6:c2:6c:06:eb:94:c4:1e:
         a8:03:0c:5f:67:f2:c5:8b:8b:c8:ca:88:41:02:c4:62:f7:09:
         98:52:61:67:b0:3d:f3:60:32:ec:39:9b:91:28:93:26:c0:66:
         78:0e:d7:32:fe:3c:9c:3f:92:6c:4d:6d:76:33:6f:db:6a:c5:
         eb:f4:82:ce:35:8f:43:2b:9e:eb:a2:0c:a4:95:64:d3:ff:d6:
         2d:3d:bd:4e:35:67:ae:38:f9:6d:07:85:9d:21:54:58:29:fa:
         16:26:c4:3c:be:7b:89:ca:4c:00:8a:fa:67:63:20:cd:b3:22:
         18:66:cc:1e:d3:e9:d5:9c:f7:1f:13:1b:52:61:dc:63:a5:a9:
         54:6b:45:f6:2f:7f:29:ec:12:c6:79:09:86:2b:21:44:43:e7:
         5f:2a:9b:02:5b:85:10:6f:d8:bc:38:85:58:9a:94:f8:f2:fc:
         f9:43:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:48 2025 by rpki-client