Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
File:                     bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa (raw, json)
Hash identifier:          oO2rl3y3QesMWkDSjOYDmnKvWbr8zmqMXlpvV//LUHM=
Subject key identifier:   7B:84:FA:FB:DE:14:D7:B3:A8:DA:71:76:C7:0E:FC:8E:D1:C1:11:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D57DF4FE629B4D8F0A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100e:bf18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d5:7d:f4:fe:62:9b:4d:8f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=3ee98dcc-fc41-44c0-8e06-96779b068a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:90:b6:8a:61:b6:28:86:72:0e:7e:fb:02:
                    ba:96:26:ef:59:5d:02:56:80:86:e9:47:6d:a9:cd:
                    a6:c1:8f:ee:e8:8f:24:24:e8:40:a0:0f:67:80:27:
                    45:16:9f:d6:db:d5:cd:8a:f3:56:69:9d:07:86:6c:
                    9f:55:2f:54:b8:6f:fa:64:29:a0:3d:be:36:ec:4d:
                    d4:f1:2a:b6:31:e8:84:1c:94:c2:53:41:76:dd:a7:
                    26:f9:98:ed:e8:a4:c0:06:20:76:70:03:3f:5d:e6:
                    e8:20:25:1f:ed:aa:08:6f:ae:40:3d:90:91:6e:ef:
                    b7:e3:44:08:97:a2:8f:b3:db:06:60:99:a0:3a:05:
                    38:27:d4:47:db:20:5d:b9:48:24:d3:1c:94:6c:ba:
                    7f:2c:9b:89:6b:82:d6:3b:d0:d3:c1:f1:4f:16:20:
                    1c:3d:bf:39:4e:22:4b:06:e4:9c:4d:db:81:dc:81:
                    77:7e:17:08:2a:3b:9d:9d:00:4c:33:d1:ea:a8:66:
                    7f:91:6b:82:3e:cc:1e:a8:56:de:a7:ca:a8:89:b8:
                    6c:7b:eb:d7:dd:e2:48:61:e8:b1:26:90:13:24:bf:
                    79:44:55:b5:a0:47:6f:8d:b9:44:4f:96:40:8f:f2:
                    eb:d7:50:ad:79:ce:80:8a:a0:5f:9e:7c:df:f2:b5:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:84:FA:FB:DE:14:D7:B3:A8:DA:71:76:C7:0E:FC:8E:D1:C1:11:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:e3:1a:9c:39:6d:38:e8:91:4b:96:46:c4:1e:c3:a7:07:
         61:fb:a4:f1:b2:9c:b1:6e:ea:9c:fa:93:bc:9a:86:11:9f:82:
         46:c9:3d:3a:c9:07:0e:e5:70:b3:0e:a7:0e:b4:db:5b:bf:0f:
         fe:7e:1e:e0:14:e6:0e:25:d1:43:9d:8b:23:62:92:72:20:33:
         c6:b8:ed:06:ee:6c:42:c4:cc:ab:64:c9:08:91:6e:c0:28:f4:
         a5:bf:53:60:0c:8f:be:73:d1:b0:60:8f:4c:3d:87:42:a2:ec:
         80:a5:01:9e:6a:07:5a:f4:ed:f6:24:b1:6f:9b:dc:aa:c9:31:
         b6:2d:00:06:0a:c1:d9:f9:cb:dc:67:09:86:9e:54:2a:ff:8a:
         6b:6f:bf:a0:28:d0:88:85:c0:a1:fe:69:8e:ff:c1:46:be:ba:
         ec:81:f2:23:d8:0a:36:00:e5:aa:39:0f:a9:3e:a4:c5:b6:a0:
         3d:c0:0a:bc:62:39:8b:cc:b4:44:d6:f5:03:63:77:7c:16:0b:
         cc:5e:90:af:a3:31:c8:6a:95:c3:72:24:b9:ee:27:14:43:aa:
         e1:93:bf:ff:fe:2e:25:38:c4:05:aa:eb:67:29:7a:b1:cc:54:
         dc:ff:c2:ec:5c:a4:ef:d8:0d:96:2a:fb:f6:cf:69:d1:80:84:
         57:f7:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:30 2025 by rpki-client