Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc2edc84-ba99-3b25-b0a1-780b0f3f2ff5.roa
File:                     dc2edc84-ba99-3b25-b0a1-780b0f3f2ff5.roa (raw, json)
Hash identifier:          dqAKdPPOmCl7OkdE1PQJTDmMsPTj4iNCIztQPaY8ev4=
Subject key identifier:   0A:17:C3:99:69:4B:BB:27:9D:3C:25:58:13:17:81:DA:75:8F:63:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29558A32BD2BB1F07D9A4080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc2edc84-ba99-3b25-b0a1-780b0f3f2ff5.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1017:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:8a:32:bd:2b:b1:f0:7d:9a:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=6e00b64b-8b79-4235-8cb9-ff8e8951d756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:fa:bd:e9:ce:3a:85:3f:a9:e0:c2:b2:4f:
                    b4:8c:d0:b6:e1:8d:70:45:52:54:23:50:5b:93:14:
                    e0:97:d0:a0:c6:42:20:48:b6:a3:bd:44:19:1e:81:
                    e7:84:48:f7:e7:33:9a:15:bf:53:a8:47:57:fe:00:
                    ab:65:c3:33:f8:6a:1f:29:c8:02:6c:46:15:4e:cb:
                    19:5c:1a:16:79:2b:7e:4a:a8:80:6e:b2:79:52:e9:
                    d1:f3:c8:ab:ca:98:af:70:43:f7:59:03:91:d2:44:
                    a0:30:a4:ae:86:0e:8f:9b:0e:cc:c9:54:55:fa:f3:
                    30:ee:1a:b1:6d:7d:81:86:2f:31:52:e0:7a:55:61:
                    16:73:d1:f1:00:2e:9d:16:8b:47:fc:2f:5e:b4:a9:
                    6b:3a:aa:32:5e:3d:65:75:75:3f:d7:c8:93:ec:71:
                    2b:05:59:e6:17:e6:bb:c9:82:ad:9a:fc:61:5c:d0:
                    06:8c:6c:ba:a4:2e:3f:1b:f6:98:ae:f1:89:d6:0e:
                    aa:de:e1:d5:8c:2f:74:25:af:39:fd:a6:ac:7a:3c:
                    8d:28:55:b9:43:44:06:71:28:57:93:13:ec:ee:24:
                    9a:a9:0b:3a:ef:9a:9c:41:06:19:e4:8b:eb:5d:3f:
                    07:ff:cf:cd:59:55:e3:6e:c4:af:3c:fc:0a:ab:5b:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:C3:99:69:4B:BB:27:9D:3C:25:58:13:17:81:DA:75:8F:63:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc2edc84-ba99-3b25-b0a1-780b0f3f2ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:14:ce:0c:7f:f8:04:2a:db:9b:40:c0:f6:c1:49:b5:0a:
         24:80:17:24:84:f6:44:db:75:5d:b1:d2:00:09:e7:c8:8b:0d:
         a0:b9:d0:59:b8:75:50:7c:3e:35:97:7e:fa:8b:b6:09:32:95:
         7c:3b:cc:00:8c:c7:fb:77:58:36:a3:43:df:f5:18:05:ca:63:
         b7:c3:0b:53:c1:d7:8c:98:d0:71:1d:af:ba:4a:a4:a3:b7:50:
         f5:67:c0:ac:17:c0:32:14:ac:e5:3a:01:dc:cc:0e:54:53:93:
         01:c4:44:7d:42:22:c5:ec:08:d0:23:d2:4f:88:2a:32:77:40:
         e4:1c:71:3d:da:64:fb:44:b2:5c:4e:36:73:2c:a2:59:26:32:
         ed:9b:30:dd:43:4f:68:c0:a2:f1:91:59:38:f4:6e:c1:90:54:
         10:3f:38:ed:84:1c:28:0b:bd:59:ab:e8:0a:f0:f3:73:df:cf:
         75:2b:60:e9:90:5c:76:37:6a:ec:5a:74:ec:12:c0:f2:a0:57:
         7a:d5:45:56:03:b2:0d:93:d9:77:f9:c5:fd:85:7d:cd:08:e0:
         52:b4:0b:48:c4:e9:28:d8:5b:db:3f:07:2f:38:8c:61:a9:8d:
         02:41:46:71:5a:7c:2a:54:22:90:57:ee:a6:19:65:ea:16:f4:
         0d:9c:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:52 2025 by rpki-client