Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45e81290-1d66-380e-baed-3d63b0f1b27c.roa
File:                     45e81290-1d66-380e-baed-3d63b0f1b27c.roa (raw, json)
Hash identifier:          rw+sjGl3GBbEECD6m0x4+fcHdqpJJkopdrXRoIk6fF8=
Subject key identifier:   91:DD:D9:AB:EB:79:5D:4F:EA:22:69:4F:B3:16:76:F5:7C:F2:A6:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9CD9EB1C34BB43FCD800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45e81290-1d66-380e-baed-3d63b0f1b27c.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1010:b0e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9c:d9:eb:1c:34:bb:43:fc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=f3f68d95-2def-4d0f-95a3-906123e29b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:3c:af:b2:6d:25:f7:6b:ec:c2:37:29:e2:
                    fa:e7:91:60:b5:c3:be:30:8d:9d:4d:8d:bc:f2:66:
                    68:5a:a8:81:f7:f3:b6:e3:6c:96:69:00:d1:89:fe:
                    9e:1a:8a:8a:8a:52:e3:79:f3:ce:ff:78:00:c9:cc:
                    52:8e:cd:ba:cb:e9:8b:ed:44:e3:5c:61:18:ab:75:
                    40:a2:9f:ef:8b:79:f9:e0:24:fb:4c:8f:c5:b5:f0:
                    cc:7b:8a:f0:8b:4b:b0:8b:47:1f:99:5a:e7:56:0f:
                    0a:33:9f:6e:de:62:3a:33:6e:64:e4:22:02:b7:8a:
                    c2:9a:82:1f:ff:7a:7e:e7:97:eb:97:e4:8c:60:cc:
                    86:72:71:62:23:20:b2:9c:46:47:43:3d:9d:fa:03:
                    80:80:87:44:52:35:2e:d2:3b:a6:45:ed:9e:06:3f:
                    3c:7f:ab:93:7d:5a:8c:9c:7a:7a:56:0c:0f:05:37:
                    87:f4:bf:d9:3d:b4:6c:e8:b2:76:85:82:09:2c:94:
                    7b:27:81:5d:8f:d9:03:de:22:fd:b2:b3:03:51:1a:
                    d1:9f:fc:7e:da:0a:a5:af:76:7d:cc:dc:c4:8c:9f:
                    02:07:a9:bc:20:18:53:aa:c0:54:ab:f1:63:0b:61:
                    11:4b:72:9f:7d:69:7e:c2:f7:1c:3f:08:c5:83:06:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:D9:AB:EB:79:5D:4F:EA:22:69:4F:B3:16:76:F5:7C:F2:A6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45e81290-1d66-380e-baed-3d63b0f1b27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b0e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4c:7e:3a:a1:5b:f4:74:e4:ce:7c:18:00:25:df:5d:f8:c5:
         23:5c:87:18:9e:0c:dc:c8:ec:85:69:fc:08:db:57:0f:8f:e5:
         a7:cb:68:5e:3f:c9:d5:34:51:f0:b3:54:4e:22:80:95:2e:59:
         7c:c7:ef:e8:b2:7e:29:2e:73:6a:84:9c:a0:0c:6e:cc:b5:4f:
         1e:d2:ac:ec:51:79:56:90:28:5c:99:6d:0a:0a:15:4c:a5:21:
         b1:52:60:be:2e:72:2f:ae:a7:94:ea:6e:cd:77:06:6e:5e:02:
         d3:0a:e0:31:34:30:7b:8d:60:a5:af:e1:1d:68:19:db:fd:75:
         13:7c:33:36:d4:be:0e:2a:68:8e:b8:ba:d1:95:2f:07:11:d4:
         63:71:4b:26:05:c5:6e:eb:7c:5c:3f:82:41:ca:b9:c5:09:c2:
         87:2c:23:c0:bd:f6:28:3b:72:c6:93:c1:32:3c:b3:f7:55:76:
         ef:b0:33:3f:61:72:69:ed:22:3d:8d:a5:a1:d1:6e:9c:7a:a8:
         49:2c:3e:5d:47:1d:07:77:04:68:73:69:25:96:7d:e8:33:45:
         7e:51:20:f7:6f:6c:e8:2c:2b:71:6a:d6:cd:e8:fd:75:b6:d8:
         e9:19:13:b4:44:78:a0:5d:47:f8:86:06:31:ec:8e:81:71:97:
         b5:00:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:27 2025 by rpki-client