Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/603ce6a7-a70f-3061-93a0-cee6020668e1.roa
File:                     603ce6a7-a70f-3061-93a0-cee6020668e1.roa (raw, json)
Hash identifier:          aoA3rodRnmFStfDM0P0uSM201PyRYbnvBL9L+s0/1F8=
Subject key identifier:   A0:A0:5E:0E:F8:70:8F:3F:16:ED:E6:A5:8B:03:04:F9:F6:C3:E8:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E35973E7481EE6C36DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/603ce6a7-a70f-3061-93a0-cee6020668e1.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1009:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e3:59:73:e7:48:1e:e6:c3:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=212261fc-790b-42d0-bc13-b42bbb730753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:d9:63:8a:07:f6:c0:0d:27:03:ef:6e:07:
                    d4:92:9c:5d:e3:fe:ff:18:e8:39:6c:e0:3e:9f:e2:
                    2e:d5:dd:df:98:b9:e5:8e:2c:3a:38:43:5c:5f:85:
                    13:77:df:1d:57:3f:ba:be:ae:c1:2c:ed:ba:65:72:
                    6e:68:f9:8e:1e:6e:23:b6:3c:59:41:3f:8f:6a:3d:
                    ea:22:0f:ce:f0:15:74:60:b0:15:17:74:96:1f:de:
                    85:0c:b0:de:3b:5d:d1:dc:0d:c7:db:23:be:51:ca:
                    7e:f6:1b:62:eb:8b:e5:67:cb:e7:5c:42:29:65:b8:
                    66:62:08:c7:6c:cf:a2:d8:74:80:e4:8c:ef:7d:c2:
                    2c:ab:d5:aa:ab:88:d7:a7:ac:cd:5a:ab:d2:3b:2b:
                    8f:7d:87:85:cc:71:d4:1c:b1:3b:85:43:5f:9e:35:
                    d5:db:64:3e:7e:5b:a0:f7:71:b9:9a:90:86:8b:69:
                    da:89:9a:2a:c9:fd:0d:62:43:ba:c9:f6:3e:ef:c4:
                    ac:46:23:83:dd:0b:77:7b:83:63:73:c5:f6:8c:06:
                    ad:c9:27:a4:af:86:7e:42:96:3d:fa:28:5e:4f:16:
                    29:5b:03:e0:f2:59:f8:57:f9:ee:90:92:8f:77:84:
                    7a:c9:3d:84:62:96:6a:87:7b:ba:f2:9b:97:06:ed:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:5E:0E:F8:70:8F:3F:16:ED:E6:A5:8B:03:04:F9:F6:C3:E8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/603ce6a7-a70f-3061-93a0-cee6020668e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:50:fc:06:07:ba:92:48:09:3f:29:5b:c9:2f:21:05:aa:
         a4:a2:e3:c8:a2:49:48:c5:be:3d:84:90:f2:12:18:44:c3:47:
         57:34:b5:7e:4a:df:98:59:01:8b:e9:7e:ee:cb:e6:96:46:6f:
         a6:8b:a0:7e:96:9d:38:7a:b3:30:65:42:b9:4c:84:ff:8f:f0:
         12:98:dc:fe:f1:f8:cd:d4:54:9a:a5:85:99:50:e1:4f:63:80:
         f9:b6:db:bd:0e:3a:a2:42:cf:2c:5e:6a:f1:bf:60:fb:63:bf:
         fe:15:72:c8:a4:bc:31:61:4c:84:fb:16:e1:68:df:13:31:f0:
         07:8b:44:72:77:be:81:25:2c:ce:32:78:11:85:cf:bc:a7:9b:
         fd:e9:c9:65:ba:1b:2e:1c:3b:58:9f:cc:a0:86:90:2c:e5:41:
         8d:34:82:62:73:2b:48:8b:77:9d:18:ec:85:f4:fc:b8:d6:01:
         18:95:c1:b7:35:b7:18:ef:91:d1:60:bd:42:b6:66:fd:19:ae:
         bf:d5:bd:db:74:f8:9a:6d:88:76:88:26:a5:95:d9:36:76:45:
         ac:fa:66:60:77:03:db:61:d8:94:b0:4c:1e:c0:ab:bb:50:c2:
         a9:55:b7:85:bf:00:f9:fe:b7:a6:21:b3:c1:93:0f:be:26:b6:
         d1:7e:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:07 2025 by rpki-client