Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c04bdac-24b0-3d3b-a4bc-2f890989bf13.roa
File:                     5c04bdac-24b0-3d3b-a4bc-2f890989bf13.roa (raw, json)
Hash identifier:          KxlNbZDNRYgG3mdmcgswWuRR0AQUfT/2xV1PJqXUAIc=
Subject key identifier:   EC:53:72:E6:83:14:67:C2:41:19:ED:C3:59:5A:F2:A0:5A:0A:C6:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9D6A16DE14FDD2D74880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c04bdac-24b0-3d3b-a4bc-2f890989bf13.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1010:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9d:6a:16:de:14:fd:d2:d7:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=fddd06f9-2f4d-4d93-ab0d-30b66c930d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:fb:a7:32:9d:19:70:e8:e1:7a:e1:73:38:
                    2a:35:85:f2:14:cd:5b:72:fa:0e:e6:ab:0a:19:9c:
                    59:c9:b2:eb:71:c9:ea:11:48:e0:cc:2c:88:b9:a7:
                    c9:6a:a1:d5:61:e0:aa:b1:fb:c6:61:f8:cf:62:12:
                    af:53:0b:59:b1:6e:53:f1:f7:4e:5d:29:82:8c:ea:
                    95:f4:7f:f1:6d:e8:62:47:93:27:a2:c5:f0:4d:1c:
                    a7:60:a5:cb:91:b3:eb:45:30:1f:f9:c0:e0:93:d1:
                    e0:64:40:ad:87:96:46:71:5c:d9:8c:2b:25:64:66:
                    6e:c7:bb:e9:60:1f:7d:09:7e:90:fc:d3:3f:f2:b6:
                    a9:04:19:bc:9c:0e:f3:20:7d:8a:03:13:02:5b:03:
                    07:c6:61:dd:d8:91:ec:95:aa:03:7e:18:be:fc:ee:
                    ec:a0:0e:73:50:82:42:ee:cf:06:f8:f2:24:3b:8c:
                    2a:41:d1:c1:40:a6:4c:c5:58:a5:f3:24:60:6b:00:
                    7d:d8:cc:92:87:1f:2a:52:cd:be:c0:41:90:3c:60:
                    5d:2b:d3:02:a6:f9:57:7e:5b:8f:e6:55:0a:17:a2:
                    eb:b6:7d:96:f8:90:35:43:e0:99:ba:d2:92:f1:8e:
                    90:5d:b0:dc:4d:d0:9b:dd:8f:9f:f8:a9:2e:c6:48:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:72:E6:83:14:67:C2:41:19:ED:C3:59:5A:F2:A0:5A:0A:C6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c04bdac-24b0-3d3b-a4bc-2f890989bf13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:a0:2c:bb:3b:a6:fa:f3:35:17:52:ab:bd:0b:0e:97:95:
         b9:af:f3:e0:50:7e:6e:41:96:2c:24:77:96:48:78:e1:a5:2b:
         a8:0d:b7:09:d5:86:44:85:69:84:fb:f8:af:87:29:f8:d1:82:
         2c:8c:05:3e:6c:8d:b9:08:5d:09:bf:f2:5f:19:c4:78:cd:1c:
         d5:32:4c:51:b0:85:34:66:6c:b3:33:6a:3f:10:75:36:18:37:
         9f:8f:06:16:3d:3e:b9:0f:1f:ba:ab:04:85:c3:05:e3:b8:8b:
         bd:ad:6e:e2:32:01:da:4e:84:c8:d8:e1:31:88:08:af:52:20:
         65:02:1a:67:5d:61:07:ea:b9:b9:a2:f9:c0:06:84:7b:50:43:
         00:37:1f:d3:0b:22:52:de:b4:b2:d1:32:af:41:6c:1f:a0:37:
         48:b0:6d:72:15:83:ca:95:ba:82:fe:87:e8:1f:cc:da:7f:08:
         e5:d5:5b:f2:cd:15:31:ab:d9:7e:af:e5:cc:4a:27:31:f6:11:
         c5:20:d4:39:41:4d:51:b1:b9:4f:6a:40:8e:6f:f0:d8:9e:1e:
         29:b6:39:42:56:0e:4c:19:a1:5c:52:a6:c4:90:cb:9a:03:82:
         8c:68:0d:86:a5:bc:4e:7d:a8:c1:54:c1:83:9a:64:cd:3f:73:
         11:e9:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:57 2025 by rpki-client