Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90e9f151-d26b-3219-8e5b-ef7b7b87f407.roa
File:                     90e9f151-d26b-3219-8e5b-ef7b7b87f407.roa (raw, json)
Hash identifier:          /OHKTKbiy6XwRDqhTYemiZXlp8CXOTb/cLIWJkWwaMU=
Subject key identifier:   59:1F:A3:04:4C:8D:F4:4F:F9:1B:4D:9F:29:20:B7:7E:AC:AD:0D:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEB057F07128E54829CF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90e9f151-d26b-3219-8e5b-ef7b7b87f407.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:b800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b0:57:f0:71:28:e5:48:29:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=83fbbe33-cf3a-4e98-872c-3a5c96d75746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:6b:16:ca:da:eb:1a:14:dd:98:05:14:ce:
                    d7:00:ef:b8:05:f6:11:80:7c:45:62:b7:d8:f4:4a:
                    c2:bf:7a:e0:a6:70:a3:13:9e:1f:f9:a6:14:1e:ec:
                    74:62:fb:5a:02:cf:02:cb:05:9b:68:e5:16:5c:14:
                    b1:93:e3:24:8a:bd:6b:2f:b7:0c:ee:e0:74:2d:4a:
                    e5:6a:e8:bf:3b:1c:f4:6f:46:f8:b0:9e:17:a2:b2:
                    ba:99:a9:02:67:88:db:ea:66:68:66:e5:e8:33:a4:
                    53:81:97:7f:37:23:10:99:9c:57:e5:33:b9:39:52:
                    a3:4c:22:6b:a3:22:78:1e:54:b4:59:0d:e8:fb:9f:
                    08:98:07:0b:aa:f4:c3:65:d9:cb:71:64:46:8d:84:
                    7b:3c:cb:3b:38:9a:1b:02:03:5d:bd:ba:ad:9c:2d:
                    f1:ef:ba:ff:46:b5:13:9f:2e:6c:cf:95:20:1c:ef:
                    c7:33:df:56:d8:92:cf:ec:5c:1a:b6:59:7e:8c:29:
                    0c:56:fe:88:c1:be:25:ba:0c:2a:0b:b0:d6:3e:ad:
                    27:d5:2e:c6:42:6f:5f:d5:02:22:4f:45:de:c3:de:
                    46:9a:2d:7e:d3:f9:5b:ec:6a:ac:9e:8e:7a:cf:f9:
                    0a:02:1b:50:44:88:36:10:dd:5d:ec:f8:22:04:cb:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:A3:04:4C:8D:F4:4F:F9:1B:4D:9F:29:20:B7:7E:AC:AD:0D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90e9f151-d26b-3219-8e5b-ef7b7b87f407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:ed:6d:a4:51:e7:5f:f6:92:ad:46:7e:0d:5e:cc:94:f3:
         22:f4:5f:8c:b8:51:d2:6f:5a:01:fe:88:7a:f8:99:67:15:06:
         5c:ef:8c:76:2d:7b:9d:16:5a:0a:b9:19:f6:d2:38:d8:5c:d1:
         d3:02:b2:ae:d4:53:d4:c5:3b:58:2f:ff:30:4e:a2:df:d6:d0:
         b9:d4:1e:5c:9d:e7:f0:21:dd:39:6b:86:d6:ed:13:be:97:d0:
         1e:f7:06:aa:a4:2b:be:45:bb:4c:d1:a1:63:59:ea:d7:1b:d2:
         21:e6:f0:a5:e5:e2:16:77:03:e1:2e:8d:ce:2d:15:eb:db:9c:
         d8:ff:14:b4:09:2e:93:16:5a:d6:58:33:ea:3a:03:81:2d:fa:
         d3:6c:fa:47:cb:19:82:83:a0:43:e4:e9:27:0e:b9:e0:10:e9:
         74:d0:4c:aa:cc:ca:76:a0:3f:a0:d7:86:69:c7:32:a0:45:38:
         71:7f:c4:37:51:55:fa:57:c9:d8:42:6a:89:4e:ee:b1:a9:ed:
         98:43:6f:2b:3f:01:e4:05:45:29:b2:6b:ad:0c:52:c3:2e:c6:
         2c:71:c9:c8:83:ee:c1:2e:52:28:a7:fa:65:8b:4e:da:16:2b:
         3c:89:5a:9d:fa:e8:10:3e:76:63:35:6e:ef:94:46:fb:e1:be:
         fd:13:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:46 2025 by rpki-client