Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e571067-30b1-394c-8e71-c2c7f87a39c7.roa
File:                     4e571067-30b1-394c-8e71-c2c7f87a39c7.roa (raw, json)
Hash identifier:          XiS4g4eoRbmF5xi7nYLoj9VQ06+WEDXeS0TUN8SPHuA=
Subject key identifier:   78:ED:DC:B8:AC:70:3A:9A:19:BD:AA:FD:15:52:B6:F3:77:1A:13:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA7CE295C9CC588A8D388
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e571067-30b1-394c-8e71-c2c7f87a39c7.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a7:ce:29:5c:9c:c5:88:a8:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=43ce165a-4c10-4a9d-9e0e-6fda496a9af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:26:c7:f0:c9:8c:66:49:3d:81:9f:91:8a:
                    b6:9d:30:48:8f:25:1a:49:f6:28:b3:05:f5:af:ba:
                    c9:47:a7:9f:7f:04:f9:b3:2c:37:76:f0:2c:26:2d:
                    9f:4a:09:28:e3:b8:c6:3d:36:c9:9b:50:ea:2c:93:
                    d5:9c:c3:4d:17:b9:7e:c9:19:f7:ef:2d:fa:22:65:
                    e9:c0:32:15:41:ff:65:95:7e:a7:b6:95:37:43:e7:
                    dd:61:dc:ee:78:d4:02:64:4b:d5:00:f2:95:a1:55:
                    02:89:59:dd:9f:76:69:7e:91:b7:d1:72:35:e4:59:
                    1d:76:e1:7e:cf:7d:f9:04:9e:d7:d2:60:5f:e3:a1:
                    b3:85:c1:9d:06:8e:da:93:4f:3f:d6:df:39:22:6b:
                    61:50:77:f0:f3:fb:4f:27:36:71:44:8d:14:0f:fa:
                    ad:39:fe:d3:4d:bf:08:87:51:c9:9c:f6:a8:29:d7:
                    d8:81:b5:1d:46:af:5a:a9:76:ec:8a:ab:8a:ef:88:
                    fe:7e:9d:ab:6a:79:fa:f2:94:f8:a9:c7:4c:2d:b9:
                    11:7a:3c:39:22:65:51:f6:f7:3f:1f:7e:50:ae:ef:
                    5e:56:f5:81:2f:1d:e3:ff:62:fb:de:a6:cf:87:bb:
                    d0:4f:cf:5d:47:be:ac:df:de:a4:fa:1d:8b:a7:a3:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:DC:B8:AC:70:3A:9A:19:BD:AA:FD:15:52:B6:F3:77:1A:13:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e571067-30b1-394c-8e71-c2c7f87a39c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:01:14:58:db:44:28:44:85:16:b7:73:bf:68:07:66:cd:
         00:21:0c:ba:61:c6:86:46:14:85:40:d2:c9:05:fc:38:2c:89:
         7f:89:cf:d6:44:61:f3:ea:01:96:31:34:1b:df:46:5d:e0:b3:
         83:61:63:3d:ea:be:3b:44:d8:41:9f:17:03:6d:63:06:0d:7a:
         bb:d9:61:c2:35:7a:ab:d7:cc:95:9e:9b:2e:b0:f2:00:b4:f5:
         a8:e1:b8:ca:27:24:27:12:ee:2a:71:32:04:a7:3f:3b:2e:73:
         f0:ff:d8:3e:0a:22:12:d8:4d:1b:97:df:79:86:66:2c:70:fe:
         66:04:fc:74:54:f1:63:c9:88:ab:b5:7a:ba:a0:a8:6a:f2:ef:
         0c:07:5b:b5:67:34:46:8d:6e:d1:29:36:fb:da:39:bb:9d:9b:
         59:1a:db:18:74:b0:8d:32:d6:c6:67:50:a0:77:a6:89:90:e7:
         06:dc:18:25:4b:a8:20:af:e3:d4:c7:12:a4:7d:85:0a:09:2f:
         9f:02:1c:7f:37:04:77:a6:d2:58:ab:7b:ab:31:44:74:a7:84:
         35:b2:52:23:fb:d4:34:f9:f3:fa:12:5a:72:4e:78:b6:ad:63:
         c8:8b:d7:b3:cb:8c:91:e9:a6:8f:5a:89:3f:dd:cd:00:e7:35:
         ab:dd:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:38 2025 by rpki-client