Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa
File:                     e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa (raw, json)
Hash identifier:          TrFc9ar7BenOWVq9i4cFaTEygX9v+wGr1OQNTsjdlYw=
Subject key identifier:   AC:3A:40:3D:0A:58:E0:DA:8A:65:B1:3E:61:F0:9A:AF:D6:3A:5F:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400CF1C08B6E8D227073CF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100d:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:cf:1c:08:b6:e8:d2:27:07:3c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=f8254e2e-3ea9-49f7-ba47-1ec74377a4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:1d:c5:ac:35:25:ac:35:75:cf:67:90:1b:
                    12:08:b7:77:db:a5:7c:5f:8a:5f:db:f7:b2:b0:37:
                    8c:18:f0:04:c8:26:e3:6d:a1:79:f0:35:56:5d:e5:
                    54:80:07:c9:12:cf:79:8f:74:38:4b:c9:04:25:b2:
                    a6:58:4e:8e:33:52:41:35:e3:31:83:3f:43:dd:b8:
                    1d:60:07:5b:9a:a1:e7:4e:74:be:77:b4:1b:0d:a4:
                    22:07:a6:45:be:1f:5d:64:ce:d7:09:da:0a:d0:4b:
                    9d:b6:a3:5e:bf:de:76:1e:68:76:cf:f6:32:ed:25:
                    9e:e1:34:30:a8:2e:5f:42:73:81:7a:e4:2d:32:6d:
                    9b:8d:4d:cd:aa:d1:ff:67:d8:2b:04:9d:56:35:c5:
                    ec:cf:6f:02:c6:22:6d:89:ca:50:c9:59:91:45:d5:
                    6d:1c:cc:0c:d7:e4:e9:24:66:65:a8:bc:7d:07:f5:
                    1f:26:3c:2f:07:07:da:54:5b:98:70:12:74:ed:bc:
                    cb:04:3d:f9:d3:36:b1:cf:67:90:35:55:6f:83:c2:
                    84:4f:d0:b2:db:54:e8:a3:81:39:c6:b2:6a:ae:c7:
                    d7:7a:fd:1d:d6:40:a0:b7:7c:df:f7:94:1e:90:d4:
                    23:a8:c3:56:06:0e:9a:e7:59:c6:3f:b7:db:b5:02:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3A:40:3D:0A:58:E0:DA:8A:65:B1:3E:61:F0:9A:AF:D6:3A:5F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f0:57:0a:a4:9e:92:3b:ba:d7:9e:80:26:bc:95:da:21:16:
         2f:bc:71:74:f2:69:f5:67:bc:67:89:e1:48:3d:b8:2a:19:e5:
         ab:25:e5:6c:18:76:df:69:56:d7:8e:3b:b7:e8:ac:f8:65:7c:
         b1:96:dd:4b:62:c8:2f:46:df:d1:e8:43:8e:25:80:7b:01:e9:
         e5:80:d1:3e:de:6e:9a:fe:65:90:66:00:ed:98:9b:0e:f1:1d:
         c5:62:97:45:50:30:06:b2:a5:e4:22:bd:b2:b8:ab:19:d2:08:
         d5:b2:7c:a0:fa:94:3c:63:28:00:0c:d9:ed:9a:0f:41:05:94:
         05:12:d4:e3:db:9f:88:79:66:da:35:e2:e8:2e:ca:e4:f1:4f:
         51:d1:a0:54:c2:e0:67:d8:c7:38:f7:de:cb:61:4e:95:77:02:
         9f:ce:55:fd:36:f3:26:78:d2:de:cf:cf:de:ca:14:08:99:2c:
         c7:7d:64:b6:52:05:9f:bb:97:a7:93:a3:6c:b3:cd:48:9c:f4:
         66:a8:b7:02:59:4c:f1:83:0e:e6:6b:f2:36:8a:57:5d:b6:ce:
         19:a1:be:8d:a4:5a:0c:3d:63:bc:83:23:89:62:c5:bc:44:17:
         9a:e9:3b:ae:fd:db:aa:40:0e:11:e5:af:8c:9b:6e:71:45:93:
         86:ef:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:06 2025 by rpki-client