Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316ecd9a-f2b8-34bf-8dd5-c54a5a9fe000.roa
File:                     316ecd9a-f2b8-34bf-8dd5-c54a5a9fe000.roa (raw, json)
Hash identifier:          nu8W9Um5MvzX37davbPpLNGs+yX/+vYI+EXWJg/prSo=
Subject key identifier:   F6:3C:DE:A0:40:CA:FF:28:95:AA:CE:BB:1A:37:B9:13:6B:55:DF:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2483ED79B290889713C680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316ecd9a-f2b8-34bf-8dd5-c54a5a9fe000.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:b0e8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:83:ed:79:b2:90:88:97:13:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=62fa598c-0aee-46a1-8428-ee757b1957fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:c4:3a:0f:5a:3c:4a:63:99:de:c5:88:68:
                    0e:6a:f8:a9:89:64:b0:2f:d0:0a:da:af:b2:57:c7:
                    23:09:01:94:73:77:8a:17:bf:19:1d:88:a5:97:39:
                    71:12:6d:5c:72:41:c3:11:d2:ef:69:7c:eb:b7:d6:
                    ed:35:88:b8:14:6b:fd:86:d2:c2:fd:7d:1e:90:2b:
                    18:53:d0:e6:06:67:35:99:3f:f3:c0:ed:2c:a2:e2:
                    2f:57:49:64:cd:73:03:a9:53:43:e3:8c:9c:0c:e5:
                    6d:02:6e:db:97:14:bf:94:76:9c:6b:52:99:88:14:
                    5a:72:7c:fc:13:d3:ae:19:5c:18:e3:8f:98:f0:7e:
                    1e:40:c8:fd:c0:36:2a:3a:73:f5:f9:8b:fd:5a:1f:
                    da:52:52:6a:42:b1:30:93:ef:20:38:f5:54:9c:83:
                    da:4c:57:3d:f4:0a:b5:0e:3f:4c:b4:07:54:24:e0:
                    c2:09:68:49:a3:55:dc:3e:a3:12:1c:40:9e:3f:2f:
                    d8:7c:e3:f7:84:7f:0a:68:ee:bd:cc:62:68:12:bb:
                    62:7c:80:9b:a5:9e:10:93:f6:df:ec:dc:58:db:b9:
                    f5:55:89:1a:24:31:c1:b3:29:ee:24:78:fb:3a:95:
                    f5:2d:0e:b1:92:fc:93:1b:bd:4c:ae:a1:9d:e0:4b:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:DE:A0:40:CA:FF:28:95:AA:CE:BB:1A:37:B9:13:6B:55:DF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316ecd9a-f2b8-34bf-8dd5-c54a5a9fe000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0e8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:25:e8:89:17:47:d1:79:f1:c2:51:ca:bf:e7:48:01:85:11:
         30:9c:0d:45:76:e8:fb:7a:1f:d9:54:6f:b0:6a:2c:bd:02:aa:
         40:34:be:4d:9f:4b:5b:90:cb:f5:bb:39:d3:a8:c6:81:3f:d0:
         43:fa:df:62:f1:6d:c2:12:7c:a6:52:cb:b2:01:c2:47:89:5b:
         f8:3c:fb:bf:11:08:3b:78:33:05:bc:8b:c6:3e:78:63:60:d2:
         71:70:cb:11:35:62:00:a5:ff:13:6e:0b:01:00:84:cc:33:49:
         bd:1a:e6:70:a6:5c:e0:ac:3b:23:3e:d3:7e:a8:66:39:a6:2a:
         30:dc:72:f6:cb:2b:09:35:88:75:96:a6:e5:61:8e:70:d1:19:
         1a:a7:e0:8d:a7:4a:a5:bd:fd:e8:3b:fb:0d:ac:40:48:97:73:
         d2:ff:9b:ca:b6:d3:d6:f7:aa:5f:79:93:20:77:da:11:e6:3e:
         72:1a:10:c4:dc:38:2c:5b:ea:ad:b4:05:de:91:d3:99:f2:c2:
         1e:72:98:42:53:fb:38:be:75:69:95:eb:d1:43:34:94:7a:2b:
         3e:a4:76:3c:5d:be:e9:63:3a:09:6a:66:85:b8:1f:da:96:d7:
         f2:98:fb:a0:96:29:b3:04:92:1b:f2:cd:f2:7c:2d:85:cf:cd:
         f3:15:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:42 2025 by rpki-client