Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
File:                     3a290a16-187d-38fb-8970-6b614faeccf1.roa (raw, json)
Hash identifier:          rcdoe2OB2Q6fVdEALndNaPRlB/gYfvu5JhyTcSe4aBI=
Subject key identifier:   0C:3A:4B:44:FA:4B:A6:98:AE:63:BB:9A:6D:1C:31:FD:2E:07:23:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245A5C996B4E3564163000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1005:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5a:5c:99:6b:4e:35:64:16:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d26ea2a2-b22e-4fc5-a3f0-5c1758320a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:70:9b:a8:91:67:05:49:dd:25:76:9f:1f:
                    53:7d:97:8e:2e:43:53:e7:a5:7e:5e:41:36:ac:68:
                    92:54:02:10:d8:6b:8d:f1:e6:35:9c:3d:9b:c1:bc:
                    ce:a3:7c:0e:1a:b9:e1:30:3c:cb:26:22:bc:af:df:
                    e0:2d:b8:94:b3:95:9e:87:d4:e7:80:7d:5e:dd:ff:
                    6e:f8:9f:4f:8a:85:75:b0:d5:a9:2e:b6:e6:02:2b:
                    0e:ac:a2:25:79:fe:6b:9c:dc:e9:46:96:5f:87:af:
                    3d:d5:f5:e2:e2:cf:3b:41:4c:1e:b5:f0:b0:49:6a:
                    0e:78:23:2f:fb:45:a9:5d:1a:62:82:39:8e:e1:13:
                    03:21:2c:52:83:0d:2b:a4:64:85:dc:14:78:0b:1d:
                    3a:eb:14:79:71:ab:b8:2a:9d:81:68:a2:8c:dc:c1:
                    02:18:31:f9:25:5d:fa:be:7a:06:0a:d9:b4:50:ed:
                    6d:31:08:e5:62:fa:e7:28:1c:b7:c3:83:da:e9:e4:
                    d5:b9:cd:d9:25:4a:df:4a:f2:c7:03:e0:9b:56:9b:
                    7c:69:00:9a:52:14:02:8d:9b:4e:2d:ce:7c:e5:9e:
                    20:fb:ac:ea:5d:e3:4e:c8:4f:03:4c:b1:78:c7:87:
                    ce:bb:85:38:57:37:5f:8d:3e:4a:52:30:b2:9e:e4:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3A:4B:44:FA:4B:A6:98:AE:63:BB:9A:6D:1C:31:FD:2E:07:23:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:76:57:93:06:77:d1:3e:ac:e4:2c:19:70:a8:9a:f6:71:3b:
         7e:df:70:41:28:4f:8b:07:be:d8:4c:dd:ca:3e:8f:1a:61:8b:
         43:af:83:47:81:ef:7f:8d:d4:8b:a4:a7:d0:20:49:3b:01:60:
         db:d8:06:fb:3e:04:c7:9a:06:84:79:e3:3c:fe:71:78:6c:32:
         c6:72:cf:93:5f:ad:73:90:a5:60:57:4f:18:46:53:7c:a0:96:
         e1:00:42:d3:e2:0f:2d:6c:ee:e6:b4:a9:89:a1:ad:4b:81:e9:
         0c:d0:83:30:ac:b0:d8:b2:25:ff:41:33:4a:d5:08:ca:ca:ac:
         32:f9:19:89:85:73:b7:4e:54:4e:36:6b:e3:9a:ac:28:92:08:
         c4:97:b2:ab:df:54:22:db:52:49:4a:7c:96:b4:fb:65:c0:a6:
         43:97:60:cf:5b:da:73:b5:03:43:c3:44:d5:7d:5e:00:90:8a:
         05:81:87:fc:4d:1c:83:47:aa:e4:31:41:e4:60:9f:54:38:02:
         59:a5:83:dc:40:50:e3:6d:43:e1:11:94:03:33:25:38:76:11:
         df:60:a4:9a:c5:33:73:be:67:31:a1:17:9d:46:06:19:93:73:
         eb:e8:8b:c7:f8:bb:c8:73:d6:8b:21:09:0b:5c:37:f6:01:fd:
         aa:71:58:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFpcmWtONWQWMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZDI2ZWEyYTItYjIyZS00ZmM1LWEzZjAtNWMxNzU4MzIwYTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Jwm6iRZwVJ3SV2nx9TfZeOLkNT56V+XkE2
rGiSVAIQ2GuN8eY1nD2bwbzOo3wOGrnhMDzLJiK8r9/gLbiUs5Weh9TngH1e3f9u
+J9PioV1sNWpLrbmAisOrKIlef5rnNzpRpZfh6891fXi4s87QUwetfCwSWoOeCMv
+0WpXRpigjmO4RMDISxSgw0rpGSF3BR4Cx066xR5cau4Kp2BaKKM3MECGDH5JV36
vnoGCtm0UO1tMQjlYvrnKBy3w4Pa6eTVuc3ZJUrfSvLHA+CbVpt8aQCaUhQCjZtO
Lc585Z4g+6zqXeNOyE8DTLF4x4fOu4U4VzdfjT5KUjCynuR6SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAw6S0T6S6aYrmO7mm0cMf0uByOGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2EyOTBhMTYtMTg3ZC0z
OGZiLTg5NzAtNmI2MTRmYWVjY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBZEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABN2V5MGd9E+rOQsGXComvZxO37fcEEoT4sHvthM3co+jxphi0Ov
g0eB73+N1Iukp9AgSTsBYNvYBvs+BMeaBoR54zz+cXhsMsZyz5NfrXOQpWBXTxhG
U3ygluEAQtPiDy1s7ua0qYmhrUuB6QzQgzCssNiyJf9BM0rVCMrKrDL5GYmFc7dO
VE42a+OarCiSCMSXsqvfVCLbUklKfJa0+2XApkOXYM9b2nO1A0PDRNV9XgCQigWB
h/xNHINHquQxQeRgn1Q4Almlg9xAUONtQ+ERlAMzJTh2Ed9gpJrFM3O+ZzGhF51G
BhmTc+voi8f4u8hz1oshCQtcN/YB/apxWAE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:20 2025 by rpki-client