Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec7c0b83-d46e-3be1-a93c-2fe744d3ff12.roa
File:                     ec7c0b83-d46e-3be1-a93c-2fe744d3ff12.roa (raw, json)
Hash identifier:          TL3SbcJY597L8rWd7+3MzUPDpQtVMgkV+ufYXCNKF00=
Subject key identifier:   AF:A9:E7:9C:16:F2:11:75:EB:D7:1E:BE:17:8F:8D:A2:2C:32:3C:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAFC36C19A75711056600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec7c0b83-d46e-3be1-a93c-2fe744d3ff12.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:b400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:af:c3:6c:19:a7:57:11:05:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=a2674f84-da7d-4a67-a66f-987d2fc53dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:9d:5f:35:f6:13:46:09:67:34:57:27:75:
                    76:2c:78:51:78:91:ca:e3:55:31:41:45:99:19:18:
                    bc:9c:25:8c:0a:ce:43:4d:3d:a7:0b:3c:25:5d:27:
                    83:1f:07:38:05:8c:5b:99:1e:fd:dc:c3:67:7d:7e:
                    94:aa:be:23:98:d8:94:5f:b4:e5:a7:7b:f8:c3:e4:
                    c8:9b:c6:c3:c8:63:52:03:39:64:c9:d4:bd:31:17:
                    66:34:9e:38:af:38:39:2c:4e:74:d9:d7:69:11:4d:
                    6d:7b:23:b4:a7:36:58:2b:b4:64:91:27:64:53:15:
                    fb:9c:c3:c4:1e:e9:7a:ed:b4:20:13:f5:f3:17:30:
                    85:19:13:6e:f4:4f:67:09:bb:d9:37:61:a8:50:1e:
                    0d:e0:1d:0d:42:5e:37:19:f1:cc:49:95:94:ad:37:
                    a7:c3:42:61:b9:e9:22:26:52:77:75:30:57:39:20:
                    03:57:cb:db:fb:57:7a:b5:02:c1:21:36:cf:1b:7b:
                    1d:17:08:12:f5:c6:a2:cf:da:8d:2e:ab:47:5f:91:
                    c9:7a:82:75:6c:7f:4c:7f:b3:98:fc:aa:e6:0d:c7:
                    6c:c3:1e:e5:22:2a:9e:f0:4e:21:cc:d9:c2:8b:87:
                    97:69:81:b8:4e:2f:1b:d3:54:d0:2b:be:71:95:8e:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:E7:9C:16:F2:11:75:EB:D7:1E:BE:17:8F:8D:A2:2C:32:3C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec7c0b83-d46e-3be1-a93c-2fe744d3ff12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:ef:c5:2f:ab:2d:f8:8a:9c:9a:d3:1b:0e:10:b9:f4:bd:
         e6:06:28:db:4e:7d:fb:af:20:10:49:3e:42:7a:ff:75:30:eb:
         78:bd:6b:66:fd:48:3c:30:02:21:cf:50:c9:50:1c:1a:db:73:
         c0:cf:e8:87:5c:b3:72:01:53:aa:20:ce:7a:67:6b:be:60:d0:
         dd:11:fa:b7:6b:53:b0:60:5b:1c:77:70:45:a6:86:79:6b:14:
         f8:54:19:24:a1:90:33:85:1a:1d:de:12:ef:d5:97:72:b0:d1:
         59:e7:1a:24:3a:7c:c7:45:53:75:11:a8:d2:ef:6b:38:92:75:
         e4:3d:4d:af:ed:5b:b2:f4:68:4f:8d:69:9d:2c:b9:55:e7:c0:
         37:b2:dd:65:01:2b:a6:6f:4d:3e:79:de:a8:e0:44:5f:73:69:
         54:66:88:b4:d6:a0:97:c7:e4:05:3a:e0:02:d9:41:bb:96:16:
         b7:ad:9a:84:8a:4d:37:2f:81:6e:06:f8:f2:7a:b6:59:05:b4:
         5b:6e:9e:f7:20:b5:7f:ef:91:f0:21:db:fa:19:37:c2:f6:f2:
         63:7b:fe:af:a3:23:4b:eb:f6:10:93:df:c9:6c:da:fd:a6:9b:
         33:56:4c:20:92:e6:a9:d9:91:23:cb:3d:3f:69:88:6b:73:e5:
         76:ae:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:40 2025 by rpki-client