Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c6fdd4a-a9bd-35d6-8c65-26a74a08b04c.roa
File:                     2c6fdd4a-a9bd-35d6-8c65-26a74a08b04c.roa (raw, json)
Hash identifier:          6kRg3f6MhbkDqWdJNPF2wurKl14SZWVpdQ4Kd/92bGw=
Subject key identifier:   60:51:86:6A:FD:A0:10:3F:62:06:DD:E4:E3:C4:80:9F:6D:AF:29:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24774788DE5A375E091380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c6fdd4a-a9bd-35d6-8c65-26a74a08b04c.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        71.246.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:77:47:88:de:5a:37:5e:09:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d82a1100-fd2f-4afc-a23b-596f31b480d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:c1:46:b2:41:db:8d:4a:d0:e7:6f:56:78:
                    c0:fb:10:33:fc:d2:fb:cd:e5:b0:92:b9:bc:1c:98:
                    51:b2:65:82:bc:fc:2f:80:79:cc:3f:0f:5a:85:2b:
                    99:6d:99:72:20:98:cb:d5:49:17:9b:66:ae:90:e1:
                    5e:85:dd:dd:53:52:2d:57:4d:99:01:c9:be:45:6f:
                    c3:50:a3:51:8a:31:f5:55:0c:5f:b7:4b:a3:1c:0b:
                    7b:8c:11:b6:9e:aa:cf:16:4c:f9:d6:c7:1f:aa:86:
                    f6:a5:d6:0b:b0:25:c2:89:52:20:b3:42:17:a7:6e:
                    ed:7b:ba:52:9f:72:6f:40:67:91:03:9c:8c:f8:f6:
                    98:88:e2:22:4e:d8:28:29:23:25:63:0d:04:14:21:
                    1d:94:a6:80:24:93:cd:ff:25:3f:9e:b1:d4:3b:fb:
                    ce:81:b3:c2:0b:d1:ae:4c:d3:97:9a:59:a4:e0:53:
                    0e:01:02:9a:34:52:fa:d1:20:ae:cc:56:ca:f5:94:
                    9f:dc:36:35:2c:51:05:3c:0b:e4:70:b5:9d:26:62:
                    3e:dd:13:4a:63:89:9d:93:41:fa:93:31:69:b6:e7:
                    2f:d3:7a:7a:33:e9:72:8c:95:00:69:0c:b1:3f:cf:
                    64:76:f5:bb:8b:f0:ca:5c:e5:3c:d7:5c:8a:0a:f4:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:51:86:6A:FD:A0:10:3F:62:06:DD:E4:E3:C4:80:9F:6D:AF:29:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c6fdd4a-a9bd-35d6-8c65-26a74a08b04c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:17:06:19:4e:21:bf:2e:f9:98:21:04:58:8a:e9:3e:da:
         98:f9:6d:36:9d:de:b1:f8:76:32:4c:2c:2b:81:bd:11:f1:10:
         db:1b:16:f2:b1:67:97:d8:0c:67:f6:22:75:34:60:0c:c9:0c:
         a0:41:56:e0:76:ce:6f:64:79:ca:c5:48:c6:f9:be:82:27:e2:
         71:72:ad:0e:8e:ed:07:ad:55:9b:04:92:e7:3e:8e:18:61:03:
         ae:2a:8b:0a:03:c1:08:ac:57:b0:c9:cb:17:53:f3:26:bf:2d:
         bb:77:cc:b1:9c:40:68:44:6e:75:9e:a5:a7:ec:a4:62:2a:da:
         b7:aa:a2:37:15:16:86:81:96:e1:57:08:ef:df:fd:d4:cc:97:
         79:2e:92:a1:45:f3:54:d4:38:9c:e3:ee:45:58:6d:74:96:ff:
         43:1b:b6:a7:82:50:c0:39:80:1e:62:1b:cf:7c:67:1c:be:be:
         e9:f8:f0:ff:cc:03:1b:31:cb:0a:5e:62:9a:b1:2d:d8:d1:3b:
         51:42:06:93:1f:88:f6:c3:41:3b:54:be:4e:cc:6f:22:db:3e:
         0f:24:46:2c:20:7d:d6:ec:b1:f4:d8:08:e8:15:35:d7:1f:78:
         f9:6a:79:89:49:f2:5c:82:86:a9:ca:cb:45:e0:5b:06:b9:b9:
         86:b9:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:52 2025 by rpki-client