Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7feeb0fe-e391-3acb-bfb3-0d0b8c32dc81.roa
File:                     7feeb0fe-e391-3acb-bfb3-0d0b8c32dc81.roa (raw, json)
Hash identifier:          6s6isxzs+JcpbP0PIPssbhCNPktz0r+eoVw+NCVesto=
Subject key identifier:   FE:90:85:5A:B3:EA:07:B9:BA:38:23:1A:B0:D1:7B:CD:A6:5D:FA:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAFA593ABF267DA6BD640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7feeb0fe-e391-3acb-bfb3-0d0b8c32dc81.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:b1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:af:a5:93:ab:f2:67:da:6b:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=5a6e5cd6-1066-4888-aaff-3a191b32b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:a2:d9:11:b7:2c:38:72:0d:72:6c:ac:23:
                    9e:21:e2:2e:53:43:be:7a:d3:d3:8b:d8:83:0e:5c:
                    ed:f4:70:be:11:0b:ff:e9:43:04:1e:24:09:4c:5f:
                    71:4b:db:ac:24:58:8c:a5:84:03:7b:80:0e:68:de:
                    25:18:9b:e4:26:6c:fc:46:73:cf:df:9d:8c:4d:65:
                    dd:87:9b:cc:fa:f0:36:c8:8b:11:24:2b:d1:e6:d4:
                    b4:38:da:51:d2:c6:4e:93:03:75:ee:32:36:5c:03:
                    6a:ff:c1:51:a5:69:b3:2b:a8:13:ff:23:b5:b0:d2:
                    42:c3:d8:c1:03:17:89:4b:34:af:02:a8:3a:68:ca:
                    34:5f:b0:9b:11:0c:8b:16:de:7d:13:5c:45:57:d7:
                    5e:95:55:b9:31:91:0b:80:81:d5:03:ee:c8:e0:23:
                    95:eb:08:08:10:92:04:27:9b:ba:74:41:99:53:8e:
                    22:f1:b5:de:41:b2:53:ab:34:f9:6b:f0:36:db:2d:
                    bb:c8:41:2c:93:9d:4c:42:e2:ec:4e:f1:63:f6:34:
                    82:d1:3c:10:16:ec:27:34:f4:cc:55:47:a3:43:27:
                    e7:25:d6:e8:c0:f8:4d:65:39:2e:e0:d0:c4:76:fb:
                    da:2e:78:37:c4:e8:b1:08:cb:ab:e1:d3:1a:eb:00:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:85:5A:B3:EA:07:B9:BA:38:23:1A:B0:D1:7B:CD:A6:5D:FA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7feeb0fe-e391-3acb-bfb3-0d0b8c32dc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b1c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:e9:90:4a:d1:99:be:6e:c3:b7:cc:d0:6c:b2:ad:93:95:
         e9:d9:f5:b8:76:15:e8:8b:f2:ed:53:63:fd:f3:ff:61:4a:08:
         81:6b:04:b5:1f:52:bb:61:a2:6c:1c:10:53:4e:d4:84:33:1e:
         af:86:05:8b:52:26:06:ca:7f:55:82:ec:3d:bb:33:fc:2c:1d:
         bf:0d:fd:46:0d:96:17:e1:38:d8:72:22:14:00:55:cd:14:67:
         5b:a4:ff:25:d0:ab:6e:40:7e:06:fb:2f:62:fb:a3:7f:c6:90:
         fd:ba:9f:51:73:70:6f:85:3f:01:37:35:5e:68:16:88:da:50:
         91:ad:06:6a:f2:83:5e:9d:c1:0c:7a:d4:7d:01:91:07:fc:6c:
         ff:79:45:a3:f4:ca:6f:fb:a3:09:f6:75:93:04:d8:5a:cc:d7:
         cb:32:70:d6:35:58:9f:d1:cf:92:60:d7:16:45:4c:84:35:8a:
         1d:5d:a5:aa:2d:2f:dc:72:c9:4f:aa:63:89:97:43:8c:51:05:
         9f:1f:1d:50:f4:2b:1a:df:d7:8b:e1:3b:bd:55:03:15:f4:fa:
         51:8b:a7:4e:af:ee:ca:ef:70:fb:c2:e5:43:40:4c:0c:c8:1c:
         c6:fc:4e:e1:da:4d:d4:fa:76:6d:32:f3:76:7d:7e:0c:f2:60:
         31:7c:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:15 2025 by rpki-client