Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab93826d-09a6-3668-8ef5-b255a3e7e327.roa
File:                     ab93826d-09a6-3668-8ef5-b255a3e7e327.roa (raw, json)
Hash identifier:          6dDIIBOk+B+byjo4rYrkdon2FlqVnwA+ZA7TAttRquQ=
Subject key identifier:   91:39:8D:36:68:FB:8F:8A:28:FD:6D:69:38:E2:6A:59:E4:1A:36:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E9ADC71534770EF175A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab93826d-09a6-3668-8ef5-b255a3e7e327.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100c:b230::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e9:ad:c7:15:34:77:0e:f1:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=e341edc2-fd4e-42a1-b791-8d095a7ea8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:07:9c:8d:a5:db:00:78:a8:2f:21:03:9e:
                    2a:b5:8b:60:80:7d:0c:e6:16:59:26:69:01:58:a9:
                    55:a3:ee:f7:af:7f:ed:82:83:5b:6d:dc:8c:a5:d5:
                    e8:3b:f6:99:ab:70:f1:1d:5c:fa:20:d6:e2:f1:6e:
                    59:96:af:ac:26:c4:fd:39:2d:ff:8b:dc:a5:a4:dd:
                    1e:36:ec:0e:de:20:96:d8:8e:3d:ef:f3:cd:b0:e4:
                    86:09:08:e8:f8:03:36:32:b7:a3:b3:6d:13:ff:cc:
                    a8:fe:05:f2:1b:2b:82:9b:4b:85:33:6a:0e:98:31:
                    32:b1:b5:c5:55:ba:e9:27:cf:90:ed:66:d5:1c:0a:
                    d5:95:82:cf:ce:05:9b:31:57:69:09:f0:51:ae:40:
                    34:82:5c:5b:18:53:75:92:a1:5f:91:d6:ed:fe:21:
                    63:e2:17:b2:4c:dc:8f:30:bc:11:c1:fb:cf:32:47:
                    25:0d:e7:77:d0:36:82:fd:e1:43:8f:2a:1e:58:44:
                    86:72:47:0c:93:ef:f0:fe:70:fe:15:a7:52:e1:be:
                    93:61:30:dc:5a:bc:82:4b:09:48:77:44:be:6e:ba:
                    95:10:fc:85:04:db:06:20:cf:41:fe:77:87:dd:a2:
                    47:20:93:ff:6e:21:12:6d:00:5d:59:9e:94:57:88:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:8D:36:68:FB:8F:8A:28:FD:6D:69:38:E2:6A:59:E4:1A:36:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab93826d-09a6-3668-8ef5-b255a3e7e327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b230::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:98:67:0d:e6:92:c7:ff:b9:63:14:3c:b2:41:f2:49:fe:05:
         68:77:93:83:5f:f6:cc:bc:43:4c:8a:1b:bb:ab:70:9c:ce:88:
         ee:3a:45:c2:fe:83:4a:f3:72:64:05:1c:c2:d3:d5:90:4d:2f:
         e7:56:34:ac:50:b4:96:0b:a0:b1:f7:61:fd:96:d8:10:a3:d4:
         45:60:de:2c:d4:f9:9a:4f:42:7e:49:ac:4f:3c:54:2a:8e:24:
         fa:8f:30:d3:f2:0d:0e:9c:e0:b4:05:3f:0b:88:93:85:15:0e:
         66:85:ab:23:fe:1d:b1:02:10:8d:7e:f0:10:8a:89:8e:39:55:
         14:99:92:bb:99:14:32:4a:82:4e:54:9c:d9:d8:aa:54:d2:cf:
         2a:10:08:62:26:30:43:a8:87:84:99:cc:80:56:b8:05:e7:64:
         41:6e:04:2b:7f:ba:18:09:99:88:d0:44:51:f2:06:c2:eb:78:
         4e:ee:9e:58:03:3a:72:a1:4a:3d:19:a0:2c:8d:e5:a2:a7:f4:
         10:87:6f:f2:81:e0:50:0f:d4:89:e4:32:4b:fe:54:d3:ee:41:
         73:7a:c9:85:24:f9:79:8e:aa:37:d2:ab:f0:6b:86:2f:8e:a7:
         f4:52:7f:fa:73:a2:41:1d:6f:56:d3:00:c9:f8:34:7e:25:98:
         86:bb:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:45:54 2025 by rpki-client