Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1dcf794-2850-3ae1-8d00-67385a8f88a8.roa
File:                     d1dcf794-2850-3ae1-8d00-67385a8f88a8.roa (raw, json)
Hash identifier:          Xygs3BQDb6tPmz/+AHbJd9PO9Ggc1QDJAzkLs9cGuqI=
Subject key identifier:   B1:D5:22:10:C6:13:EB:C5:AB:1D:0E:1A:9F:19:28:77:DC:FD:95:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA8D6BA884E79D4CBD100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1dcf794-2850-3ae1-8d00-67385a8f88a8.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:b320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a8:d6:ba:88:4e:79:d4:cb:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=fe9225a0-72cc-4f03-949d-46ef968af359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:e8:09:8d:b6:d8:4f:54:bb:5e:03:fa:1d:
                    47:f2:d6:e4:06:f6:d4:f9:fe:f6:91:f2:3c:07:ab:
                    11:5a:34:a1:b8:9a:c1:87:fb:a8:38:ca:af:04:05:
                    31:df:85:35:9b:92:73:5a:27:ce:83:e7:39:c5:8e:
                    3a:84:3d:e4:f6:5b:21:63:80:5c:79:95:47:ac:5c:
                    d8:52:e1:b2:eb:86:42:34:cb:92:de:ed:ba:ef:78:
                    2c:b8:2e:87:31:18:25:4b:e2:6d:ce:7e:ed:ce:27:
                    65:fe:7e:d9:97:9c:a4:29:85:86:cd:cf:99:f6:84:
                    74:61:b9:1b:c0:f7:67:e0:e1:a1:c4:eb:ff:d5:74:
                    92:d6:4d:75:30:77:55:f9:9e:66:5a:50:ee:72:b4:
                    a1:90:92:7f:1a:58:14:66:e8:79:a8:20:d4:db:f6:
                    3f:9a:18:8e:30:78:6c:11:20:b9:bc:a6:55:42:06:
                    2c:c5:1c:47:d4:26:4b:5f:bb:fc:db:29:f3:8d:7a:
                    43:d7:bb:46:d6:82:7c:3c:50:1f:63:a0:f1:56:92:
                    8a:d7:94:d2:de:88:24:c3:8c:94:58:64:9e:01:e0:
                    5a:1e:ba:84:d7:b4:ac:cf:2e:b2:de:95:6b:47:e5:
                    13:95:87:3d:54:bc:34:3a:8d:24:dc:8d:83:bc:1c:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D5:22:10:C6:13:EB:C5:AB:1D:0E:1A:9F:19:28:77:DC:FD:95:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1dcf794-2850-3ae1-8d00-67385a8f88a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:49:38:f1:3c:62:92:5b:33:46:6d:ac:ed:08:62:0d:0e:
         6d:d0:61:f6:6e:83:9d:66:e6:79:bf:e9:77:05:f0:88:0a:c4:
         7e:b2:c0:da:ca:0c:58:df:72:69:00:ef:f0:31:b1:e4:90:dc:
         55:ac:c0:23:12:27:de:a1:c7:1c:b7:fb:92:d8:44:41:a9:0f:
         e9:72:21:e5:89:b4:2f:bf:ed:aa:15:38:54:db:72:e4:c9:1e:
         f8:0c:55:93:f9:11:69:60:a8:8d:08:3d:47:f0:05:52:ce:4e:
         d0:20:8d:09:9d:db:6f:1e:5f:71:13:67:c9:91:de:df:f5:6b:
         ab:61:f4:7d:8b:63:3f:35:c2:a2:5a:e3:95:8d:b2:13:34:5c:
         b6:78:d6:8c:b4:f0:f3:4d:1d:af:37:ae:cb:ad:c9:de:7b:d9:
         53:81:94:55:3f:96:db:1f:aa:0a:d6:a9:bd:f9:cf:45:93:46:
         0d:9d:9a:65:02:6a:b9:ec:fa:7b:85:f5:c2:4e:b5:d7:8f:ce:
         16:f3:91:3d:32:fb:c3:d8:03:65:f4:13:9a:e1:d7:09:78:44:
         ac:ba:87:6b:65:7c:16:a7:6a:26:6e:c6:6b:76:b4:cc:62:2e:
         84:7f:27:70:92:9c:61:e8:a9:b9:c0:41:d2:3a:81:fb:87:88:
         27:67:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:44 2025 by rpki-client