Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb29675a-51e9-3b4a-bbb9-05bfe7ea1606.roa
File:                     bb29675a-51e9-3b4a-bbb9-05bfe7ea1606.roa (raw, json)
Hash identifier:          LNhRRhmsB0U/+Ld8hEkOW2NpNkHFdIce/yIM5j9DOt4=
Subject key identifier:   4B:7D:B7:12:53:F4:8F:3C:A5:81:37:D1:8E:01:8D:DA:B7:DF:9B:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493B5AC66720AADFB0446B8100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb29675a-51e9-3b4a-bbb9-05bfe7ea1606.roa
Signing time:             Tue 18 Mar 2025 19:09:25 +0000
ROA not before:           Tue 18 Mar 2025 19:09:25 +0000
ROA not after:            Mon 16 Jun 2025 19:09:25 +0000
asID:                     6167
IP address blocks:        2600:1002:1080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:5a:c6:67:20:aa:df:b0:44:6b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 19:09:25 2025 GMT
            Not After : Jun 16 19:09:25 2025 GMT
        Subject: CN=f87f4d8c-b255-43a7-83f1-7278a3063b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:07:31:db:2d:e6:20:50:17:19:74:3e:73:
                    93:3e:28:a0:6d:38:37:cb:72:57:dc:cf:69:08:c8:
                    84:3a:a8:8f:62:05:a9:53:aa:c2:91:f4:b8:8c:45:
                    a7:fc:13:35:cb:fb:5c:12:6e:15:85:b7:98:8f:07:
                    d5:f2:25:a8:06:2a:2b:27:f3:0c:96:a7:27:a1:0d:
                    88:bc:d7:d5:67:8e:c4:a8:51:0b:56:d4:d5:95:2b:
                    f2:ae:0e:c4:cc:7c:59:da:74:fb:2f:cb:97:15:7c:
                    62:4e:87:32:da:64:d9:0e:56:00:ba:e1:0f:6f:aa:
                    08:79:74:c0:72:ee:45:96:e6:bc:cc:d8:5c:20:66:
                    49:b8:4e:06:d4:64:bd:0c:93:d0:c0:be:05:6f:32:
                    e3:38:4f:3e:40:09:79:38:7a:2c:bf:53:c3:01:10:
                    90:01:3c:ac:ed:4b:fc:3c:de:c4:86:75:75:8e:41:
                    c1:77:e2:79:00:67:ba:0a:c4:17:05:cb:ed:3d:01:
                    50:db:5a:23:63:f8:d0:cc:da:fc:03:08:37:46:17:
                    7a:7a:40:e0:d8:02:7c:dc:cf:58:8f:5f:44:ae:23:
                    f0:0a:a0:d6:d3:f4:0c:92:20:c4:12:22:ba:71:d1:
                    71:80:a3:3e:38:85:93:4e:a8:d2:57:f9:9c:5b:13:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7D:B7:12:53:F4:8F:3C:A5:81:37:D1:8E:01:8D:DA:B7:DF:9B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb29675a-51e9-3b4a-bbb9-05bfe7ea1606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:cf:3d:71:e6:bf:75:4b:1e:c2:a5:7b:8d:44:11:7a:54:
         26:83:32:2f:84:f8:a9:a9:1b:9d:7b:28:59:b3:1d:8f:6d:df:
         f4:5a:58:c2:55:a7:6c:f2:4c:b9:63:95:b5:89:71:6c:fd:2c:
         a2:b6:cb:d6:2f:43:38:b1:dc:b0:0e:78:db:7b:36:c7:2d:1d:
         a5:e3:d4:ec:6c:4c:d7:ce:d9:e7:a8:41:ad:13:75:af:eb:59:
         0d:d6:95:16:0c:de:49:7c:d7:f9:25:60:2d:9c:ac:10:c4:33:
         eb:69:9a:8a:86:8f:75:bd:0c:03:70:d8:99:f9:00:93:34:cc:
         1f:4b:54:36:00:fb:66:46:18:e6:df:ce:fe:98:a5:fb:37:59:
         0e:9a:f2:4e:59:15:24:5c:2e:b7:09:71:a0:ae:0d:b6:a6:2d:
         90:bc:3b:6b:c1:2c:9f:48:a1:03:68:56:df:fc:13:ec:30:bc:
         35:c0:37:34:7c:08:43:f2:c5:ed:7e:f7:7b:dd:a3:73:3d:ea:
         63:15:fc:1a:09:01:41:f1:9f:1b:10:40:07:fe:f5:8e:27:fd:
         49:02:58:76:1b:77:6e:36:0e:47:a1:9e:d1:42:9a:4a:32:eb:
         80:04:53:9d:56:70:25:0a:c1:ff:24:92:e0:2c:f9:b6:f6:4f:
         9a:46:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:36 2025 by rpki-client