Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a43b74-caa7-3641-bcee-f55cac42ffba.roa
File:                     67a43b74-caa7-3641-bcee-f55cac42ffba.roa (raw, json)
Hash identifier:          Pxx7x2zA/IM1vIipcTGRNlfGcjr76fcFa7NHVTj5gA0=
Subject key identifier:   6D:20:4B:3A:58:62:6A:BB:DE:53:2E:72:4C:28:E3:75:28:32:C0:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C248453693F17C8907CF280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a43b74-caa7-3641-bcee-f55cac42ffba.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:b130::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:84:53:69:3f:17:c8:90:7c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=85b6d75b-67a8-48f6-9d26-a2a82f30dd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:54:e0:c7:88:81:54:a5:28:2b:04:f1:92:
                    26:01:e5:13:c9:41:42:95:05:70:04:95:5f:1b:af:
                    81:11:5f:d9:9d:25:fd:c5:e0:c3:d5:ce:54:73:f7:
                    19:d4:b6:f5:20:e2:a9:66:39:30:ad:6e:91:e1:91:
                    cd:54:72:a1:09:62:dd:48:b0:00:91:ea:dd:7b:d3:
                    16:21:35:84:17:70:f8:e3:f4:86:55:0e:22:1f:e7:
                    17:55:17:f3:a0:37:b3:04:ae:2a:88:5c:24:8f:34:
                    3e:44:a9:ca:70:a5:d2:09:5d:5e:cb:13:27:f6:38:
                    d8:8d:b9:56:63:41:2b:3a:b3:41:cb:f4:ca:4b:3a:
                    33:48:d4:fc:2a:ed:da:85:d0:a5:8a:5a:96:13:41:
                    e8:61:96:bf:66:59:fb:d1:e7:4c:9d:d4:b7:21:ff:
                    45:e9:d6:a2:03:7c:10:72:cb:36:b0:ab:26:93:0e:
                    50:be:7b:2c:f1:9c:e1:71:ff:bd:d3:55:50:56:be:
                    83:a9:5b:25:e7:cd:f5:6a:23:2f:e9:c7:00:73:74:
                    94:21:14:94:9e:d7:a2:61:35:28:22:44:1b:98:8e:
                    5a:0f:d1:74:20:51:e1:84:59:04:a7:ef:51:96:e3:
                    de:ae:1d:9e:37:2c:3e:ba:cc:17:4f:d7:d1:c6:3f:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:4B:3A:58:62:6A:BB:DE:53:2E:72:4C:28:E3:75:28:32:C0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a43b74-caa7-3641-bcee-f55cac42ffba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b130::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:59:34:44:3c:a5:c3:bd:dd:b6:02:12:d2:2c:ba:c3:cd:
         7f:6e:43:f0:49:58:c7:3f:f3:f7:e7:41:fb:82:f2:59:aa:30:
         b4:4f:16:8c:d8:c0:d9:8d:ac:d1:df:39:0c:23:41:ea:3d:1b:
         6a:20:7e:3c:74:aa:60:10:b7:8b:60:ef:3d:14:9f:60:ab:4e:
         42:f1:3a:65:eb:e9:97:e4:a7:55:09:ac:96:c7:63:bd:f7:e3:
         37:3e:38:47:63:3a:cc:51:7f:9d:33:e9:8d:8e:eb:30:f6:c6:
         53:c1:e5:6f:bb:90:36:f3:7d:d4:7a:9c:51:6c:08:82:0f:d7:
         2d:53:c5:b5:81:86:ef:dd:d2:5f:5f:e5:56:38:71:6c:53:f1:
         0d:22:6e:14:cd:6f:2c:67:77:7f:59:15:e8:d4:0f:7b:f1:a9:
         57:93:ea:d4:fb:db:71:3a:6b:e8:a3:e2:99:e9:93:23:db:b6:
         da:d2:e6:62:35:a3:61:0b:22:7b:7e:40:75:d9:10:00:46:75:
         b3:87:c6:51:02:2c:27:82:39:a8:67:a2:69:1b:69:7c:04:2f:
         0f:35:bd:15:9a:b1:4e:d9:59:02:f0:93:06:fa:3f:87:ba:1e:
         e3:0b:36:52:79:8e:de:7c:fc:97:7f:34:96:7a:cb:ec:25:da:
         49:5e:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:45 2025 by rpki-client