Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45764cb1-1922-38c8-858a-887a6349708a.roa
File:                     45764cb1-1922-38c8-858a-887a6349708a.roa (raw, json)
Hash identifier:          2sdIUbosFreB5L+2gTbpAvaXOHef4pAVemTHqlLtiwI=
Subject key identifier:   C3:FB:A8:5F:4F:18:7E:9F:4A:28:2C:CA:EC:D7:4A:64:4D:E2:58:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295580FDAD5C807737B90A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45764cb1-1922-38c8-858a-887a6349708a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1012:b200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:80:fd:ad:5c:80:77:37:b9:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=87244d2a-25b7-4626-b51d-5f8588823930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:d7:16:93:d3:49:60:f4:94:16:78:08:f3:
                    3c:aa:d4:32:b1:cc:a8:fe:81:99:3f:df:b0:e0:1b:
                    64:2e:14:be:e1:f2:44:9a:5d:4b:1f:b9:fd:18:76:
                    79:b2:fb:e4:bf:f6:fd:60:5d:c1:aa:29:22:22:89:
                    0a:80:f5:7a:ac:50:fa:3d:33:f6:5b:2e:c4:dc:b7:
                    c9:26:8e:8e:0e:b4:23:0a:9d:dc:b4:f9:b6:61:56:
                    ce:10:1a:63:ac:34:89:6b:01:77:a0:56:f1:a9:6a:
                    7b:eb:64:5e:37:36:df:a7:99:02:fb:fa:16:f6:e2:
                    5f:4b:04:e1:ea:09:a8:4a:6e:77:e7:c1:80:e6:d0:
                    2f:82:13:b7:47:2f:87:8e:1d:6c:59:50:73:b6:59:
                    25:93:17:9b:15:80:fc:8a:e8:8f:7f:75:42:05:10:
                    7a:b6:22:33:1a:5d:d6:71:b4:b7:99:f3:8b:a2:28:
                    a2:35:66:48:14:39:8e:45:13:f4:68:4b:93:11:fc:
                    59:d8:b9:f2:f8:f6:0f:79:89:83:65:71:bc:a3:fc:
                    ff:da:f3:e9:1e:2a:a8:1a:cb:2f:49:a1:77:3b:3b:
                    6e:f1:fb:c9:33:c4:c2:e9:5c:24:7e:d9:ca:9e:7e:
                    15:27:3b:a7:e3:22:10:5c:01:a0:c9:ab:c9:e1:ed:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:A8:5F:4F:18:7E:9F:4A:28:2C:CA:EC:D7:4A:64:4D:E2:58:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45764cb1-1922-38c8-858a-887a6349708a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:7f:e4:c6:e1:f6:06:e2:36:23:01:02:4b:2c:3f:44:bc:be:
         cb:9e:3f:06:b6:34:ac:63:00:b8:fa:cd:ea:b7:c9:a0:e0:db:
         4d:0f:c0:cd:25:41:6e:87:15:5c:a2:5a:72:27:dd:a9:3a:c0:
         b7:98:b2:5e:77:47:4c:a5:de:fe:45:1c:6b:b1:6f:bb:02:28:
         74:8a:12:e5:7f:f0:ab:f0:11:79:ec:8e:98:44:8c:f7:38:e6:
         0c:d4:50:73:11:7e:ff:42:20:c2:39:d1:84:32:3f:5a:fd:27:
         35:e1:f5:a8:08:69:7a:f0:e2:30:f9:b7:07:1a:a5:b5:d8:bc:
         4c:60:51:5c:39:a5:9c:e0:5a:1f:87:e3:b3:31:d0:81:4e:f9:
         b0:75:f6:e0:38:fc:74:dd:7a:de:ad:e6:35:6f:d0:07:ae:b9:
         35:34:7f:56:1f:52:8f:85:be:50:88:0c:26:dc:3a:d7:23:6a:
         8f:25:c2:47:55:9f:ed:76:51:1c:a3:45:c5:33:68:21:16:7e:
         4c:ba:48:8e:83:1c:85:8e:23:b8:59:51:25:20:25:6b:b3:be:
         62:0a:a2:e4:25:21:34:8a:db:39:7a:8c:e9:e2:50:14:02:2e:
         13:61:58:26:68:31:04:97:40:1b:90:45:94:a5:76:b5:ec:d1:
         b4:60:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:06:33 2025 by rpki-client