Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcf9b242-22ff-31ce-b660-bf541b0ddf5c.roa
File:                     dcf9b242-22ff-31ce-b660-bf541b0ddf5c.roa (raw, json)
Hash identifier:          HWeyeFCQFCOUyQMdkt4syGA4rYvugtcZdBuy7ko+zPg=
Subject key identifier:   F7:DB:49:6D:D6:AE:BB:93:64:FF:7E:1C:7A:38:E5:16:80:03:9B:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1447B45FB24B77D6EB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcf9b242-22ff-31ce-b660-bf541b0ddf5c.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:47:b4:5f:b2:4b:77:d6:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=8c2a2cdf-c175-43c6-9fca-5002d043ff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:0d:68:29:85:2e:ef:ca:31:bf:88:fa:6d:
                    a8:8f:ed:13:c7:4a:75:56:49:dd:82:4f:83:9f:21:
                    55:56:fd:95:d2:43:84:5c:1c:8b:d2:6e:38:0d:c7:
                    93:73:44:fc:d5:3b:48:0f:d5:93:f1:33:56:22:d1:
                    e5:b5:82:97:56:5d:b6:f1:7f:01:95:21:fc:36:d0:
                    8a:b6:bf:2b:96:52:92:4d:03:ab:c3:71:93:37:d3:
                    c8:15:df:2d:a0:00:7d:48:42:62:02:04:f4:92:b4:
                    be:14:7e:5a:b3:d3:f0:b8:fb:91:fc:f7:c7:d4:95:
                    47:f8:ce:5c:53:e6:81:e1:93:9c:1d:50:b2:90:5e:
                    98:5b:26:4f:51:f6:dd:88:4b:19:a1:28:3e:66:e8:
                    a1:29:50:c8:1d:d0:eb:63:f7:86:49:df:61:9f:7d:
                    85:36:b6:73:c4:75:3b:06:b7:bd:b0:0b:8f:17:8d:
                    10:61:aa:f6:03:4f:8c:7b:58:c2:d4:2b:1f:d1:27:
                    34:5e:1a:b7:2f:1b:ff:86:6f:ce:f3:69:80:6b:2b:
                    4c:b9:64:a8:5d:31:4d:7b:b2:42:3c:3b:7e:e7:db:
                    f4:38:35:48:f0:ad:40:e0:77:ba:f9:68:ff:5c:68:
                    d7:a0:9a:b0:0e:9c:0e:11:55:89:07:0b:32:2d:3a:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:49:6D:D6:AE:BB:93:64:FF:7E:1C:7A:38:E5:16:80:03:9B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcf9b242-22ff-31ce-b660-bf541b0ddf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:1e:6b:f2:4f:e5:c8:d0:93:52:d9:77:04:eb:b9:86:b8:
         62:56:a6:aa:ef:a7:50:8c:24:ac:e4:46:64:62:3b:16:24:45:
         d8:d9:df:78:f7:c2:83:a7:f3:a3:ec:10:70:f3:b4:0a:92:74:
         bd:07:1f:42:e3:e6:9b:e9:fa:e8:bd:47:bb:49:3b:13:fc:c1:
         86:5a:23:c0:65:84:b2:2e:b1:e6:1e:70:36:7e:d3:69:40:83:
         51:f0:5a:d5:91:31:50:ca:7e:97:bd:a1:0e:6d:e1:29:0d:4b:
         70:2f:01:ab:fe:da:17:87:b2:dd:cb:52:61:ab:eb:37:82:60:
         99:dd:46:a9:61:e7:a0:b4:10:c1:2f:58:80:ec:ae:58:45:5e:
         62:3e:ca:9c:ce:b0:d6:9c:ff:7a:4a:c9:1a:7b:1c:46:21:1e:
         9e:b0:eb:61:d8:bb:19:5e:da:e8:f8:53:e1:13:d4:35:a2:80:
         a3:5a:6e:91:17:04:4c:49:72:37:70:3d:08:da:f6:27:91:84:
         7f:97:7c:46:6a:26:b9:ae:89:45:2c:72:94:8e:62:4e:d2:12:
         2b:21:39:10:e8:8f:f0:66:8b:1b:1e:6e:2a:5b:a8:37:09:12:
         30:8a:7e:44:a4:d5:ca:8d:c4:6c:a4:9a:3a:b7:45:14:e6:75:
         89:7c:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:36:01 2025 by rpki-client