Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/682c5f67-8986-3bbe-a8af-eaa50062824d.roa
File:                     682c5f67-8986-3bbe-a8af-eaa50062824d.roa (raw, json)
Hash identifier:          qyeTNs2hTdJb4PaZF1BOTHBkewgl5hWBYkCGC4TyxJM=
Subject key identifier:   77:1F:9F:AF:3C:04:B3:EF:65:B7:14:CA:C1:ED:E3:42:11:D7:84:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA4B9F8C88995CF147480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/682c5f67-8986-3bbe-a8af-eaa50062824d.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1011:b188::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a4:b9:f8:c8:89:95:cf:14:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=12eebfe9-1f50-4b16-b67f-72e040353b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:55:40:ae:f7:9a:c6:0f:20:8a:49:b7:b7:
                    16:f7:98:06:6e:4f:b0:82:33:48:7d:27:72:c4:9b:
                    1b:17:60:c1:b5:22:1c:d4:b5:a4:25:99:11:b0:61:
                    26:f7:f1:29:d0:eb:db:41:f3:6d:df:06:bb:e0:27:
                    e5:02:8c:15:4c:87:92:2e:a9:3e:d6:4c:23:40:fb:
                    49:23:e8:aa:40:04:93:16:c4:89:80:14:b1:ee:0d:
                    db:9b:af:d8:5c:ea:64:ab:50:cd:ea:63:3f:1c:c4:
                    62:a0:ae:f7:70:f4:ee:4e:36:b7:5f:55:23:dd:3f:
                    6d:a0:6b:a2:1b:b6:eb:c7:17:b4:b3:32:2c:2a:3b:
                    ff:3b:5b:2d:6a:a2:f7:cc:50:22:be:33:81:a5:cf:
                    44:de:ed:54:09:86:48:ce:00:9d:4d:32:23:23:ed:
                    0a:10:61:74:88:40:98:52:0d:02:9f:9f:e6:2c:c4:
                    fe:f8:e4:53:3f:2c:64:d9:f1:ab:29:df:24:60:bd:
                    3c:3f:63:49:6d:64:9b:9d:80:2b:2e:23:a6:4d:d2:
                    5a:18:17:1f:0e:c7:84:be:16:30:96:34:b5:6a:20:
                    f6:6e:8f:1b:e9:12:53:33:60:1f:e9:21:ab:ef:f5:
                    ed:4d:6b:17:14:76:6d:b2:13:1d:33:bc:2b:55:17:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1F:9F:AF:3C:04:B3:EF:65:B7:14:CA:C1:ED:E3:42:11:D7:84:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/682c5f67-8986-3bbe-a8af-eaa50062824d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b188::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:64:76:34:a9:56:a2:91:b9:ec:5b:cd:ed:30:44:81:cd:5e:
         0a:4a:25:d0:5b:62:26:8c:93:36:67:e5:e0:ae:25:f5:49:d2:
         07:20:fd:f7:50:48:bb:05:5c:e2:dd:62:4e:79:69:c3:8c:89:
         d0:a3:c6:6e:a4:42:ac:09:be:d6:41:cb:53:f1:ff:f8:75:b4:
         87:2c:ad:ed:e9:eb:51:5d:dd:86:43:b9:38:fc:f8:7e:2d:e0:
         70:f4:01:3e:e4:28:e0:0c:85:b5:62:3b:15:9e:ad:f9:1f:df:
         d4:cb:ce:9e:81:56:9f:49:bc:79:e4:31:9c:2d:b4:79:5d:fc:
         c5:04:d1:59:76:3e:82:d7:02:80:46:c8:1c:e0:0f:b7:0f:29:
         9b:e6:09:ca:ca:91:f6:13:10:03:8c:eb:c1:81:07:0d:ba:ac:
         1c:43:64:0a:e2:7d:a7:9d:7a:4c:b0:a8:06:3a:cc:58:cc:15:
         61:e6:cf:d8:77:0d:83:d9:91:70:cf:eb:62:ae:05:51:6a:a3:
         71:31:04:3a:5f:dc:8c:73:5a:ea:93:ae:ef:9f:13:d7:65:75:
         5a:ef:7e:cc:83:6c:b3:cc:05:c5:7a:50:c1:b3:70:5e:23:c7:
         18:95:44:34:3d:99:a4:49:66:dc:7e:42:24:40:35:12:e0:3a:
         55:35:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:34 2025 by rpki-client