Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba7ed59e-d722-3db5-ba6c-577a123c4106.roa
File:                     ba7ed59e-d722-3db5-ba6c-577a123c4106.roa (raw, json)
Hash identifier:          160fTAjFVKowJ6td0owjeQ8ibuyj99fF4rvxk7swOuU=
Subject key identifier:   CC:AF:DB:42:89:65:83:8D:56:14:52:97:4C:35:1C:B9:68:F7:49:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848CF4638249B2028B4E185F200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba7ed59e-d722-3db5-ba6c-577a123c4106.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:a124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:38:24:9b:20:28:b4:e1:85:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=74b71f6c-4e1f-49c9-b835-877cdc883c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:5d:d0:11:d8:48:41:0b:ce:b9:d5:30:37:
                    26:8a:a0:f0:66:6f:70:1d:ba:33:4b:d1:58:08:87:
                    70:bf:5c:57:39:3b:99:3a:73:ef:4a:a1:dd:4d:3e:
                    d0:8c:f0:85:87:5f:e0:10:fb:10:29:68:51:52:ce:
                    88:73:30:cc:78:19:b2:d5:9c:06:53:89:9a:9e:cd:
                    cd:09:58:53:e8:2f:83:60:ee:48:76:75:78:05:19:
                    d9:12:61:c7:9e:3a:bb:f8:1a:83:1e:58:11:64:ed:
                    8b:4d:6a:74:9c:3f:1c:de:c5:03:32:99:7b:c3:4c:
                    94:db:7e:25:b8:db:49:3a:b2:fd:f0:fa:c4:7f:4b:
                    20:e5:6a:64:ab:78:af:d4:e1:6c:a2:99:8f:fa:2f:
                    e1:1f:90:fc:63:31:a7:a5:f0:ca:d9:e9:0a:62:77:
                    9b:ba:e7:5a:c0:45:78:3e:83:0e:3a:e8:d0:86:b2:
                    1e:9a:20:40:6a:52:4b:e0:66:4b:44:7f:05:5b:c3:
                    60:64:87:f1:b3:50:e5:11:40:0e:e9:08:7e:72:6b:
                    10:e8:80:24:e7:41:c1:29:3a:59:71:06:ff:c5:f8:
                    eb:7d:9a:2d:3d:8b:d3:b0:c1:8d:46:30:a8:2c:8f:
                    bf:b9:cc:36:a4:d7:5c:1a:e6:39:65:a0:a5:48:1f:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:DB:42:89:65:83:8D:56:14:52:97:4C:35:1C:B9:68:F7:49:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba7ed59e-d722-3db5-ba6c-577a123c4106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:76:05:61:2c:f4:9b:19:36:25:07:f7:fc:9f:dc:91:5c:47:
         63:61:07:4d:0f:9d:87:0d:38:ac:9a:ae:44:0d:8d:be:2f:f4:
         2c:2f:69:17:d4:d8:f6:5d:9d:e1:d9:8c:e6:de:00:5a:f4:8e:
         9c:51:af:2f:45:79:9c:28:cd:9e:6c:0d:72:0c:f2:43:e9:7a:
         52:6a:84:b0:ed:c2:e9:4f:e9:bf:9d:99:7a:dd:77:48:ce:1b:
         a3:40:78:e6:37:14:c5:6c:12:30:23:20:5e:2c:12:2a:05:63:
         33:52:25:90:4d:84:65:4a:7e:39:13:b2:75:c9:01:1f:92:a3:
         8c:11:b9:6c:d5:6d:eb:38:ab:cb:0d:32:50:3e:05:c8:90:f1:
         48:d0:95:01:ea:ef:51:dc:27:cc:dd:d6:5a:cc:66:44:f2:f8:
         d9:5d:1f:5b:a7:97:44:33:9b:e2:f6:d9:aa:75:ab:3b:56:84:
         04:f5:b9:fe:a5:f9:83:dc:2b:4a:94:a1:64:1d:5a:5e:67:83:
         11:6d:48:55:9d:fc:6d:c3:ec:f3:59:87:8b:4a:31:f7:05:d0:
         3c:57:36:a2:ee:9c:e0:8e:83:2c:76:e5:cc:43:fd:a9:fc:fa:
         b3:d6:cb:e4:fb:25:32:a3:ab:6d:41:9f:44:cb:1e:10:12:40:
         87:31:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:43 2025 by rpki-client