Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
File:                     ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa (raw, json)
Hash identifier:          TeU/NWKIpATIcHX9LuCVC4UsFiw2M6aII6WwjfXC7Kw=
Subject key identifier:   DC:84:CC:B8:34:A6:7C:EA:72:B1:91:C1:73:01:17:FD:1E:3C:F1:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24899572F24948BF8AE600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:89:95:72:f2:49:48:bf:8a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=244b5053-e9e7-45c6-864f-02899f7991ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:24:75:f5:8a:af:cd:91:38:d9:48:87:2b:
                    17:a3:1d:cc:d6:df:2e:bc:fa:47:bb:4c:83:a4:23:
                    87:5e:2e:8a:60:21:da:a6:ee:49:b5:e6:81:1c:fb:
                    08:90:9a:0e:e5:90:4d:8a:f9:cb:cc:9f:2c:40:6a:
                    ff:2d:79:87:9c:da:83:b3:fd:06:67:02:76:1f:79:
                    2a:5e:14:a9:cf:1e:30:b1:98:5a:a2:5e:77:ff:a5:
                    47:f6:48:fd:d9:39:02:3a:c2:41:c5:4b:f6:ea:f2:
                    cc:40:a1:bc:a8:9f:e3:35:a5:3e:7f:47:94:3f:32:
                    00:82:d5:e2:70:e8:b5:6e:1f:ce:85:9a:28:d3:53:
                    c7:a1:7d:5f:98:7e:c0:20:05:a0:73:5b:91:82:60:
                    35:0b:7a:7c:e5:c2:c8:f3:32:0d:36:09:5b:f0:a8:
                    84:4d:a2:9c:7a:b5:9f:8b:5c:0e:8f:84:58:2b:b9:
                    b3:15:3f:b5:7a:27:8d:f9:13:d1:52:f8:b4:0b:d1:
                    bf:98:52:80:54:e9:ec:b2:34:22:40:b8:63:27:27:
                    3d:37:90:dd:89:91:4d:ec:83:a5:76:38:fc:22:da:
                    c6:34:4e:c9:21:5f:b2:7d:9b:fb:38:2a:1f:bb:96:
                    79:c9:da:d9:7a:fc:ea:27:ff:c8:e1:68:ab:31:45:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:CC:B8:34:A6:7C:EA:72:B1:91:C1:73:01:17:FD:1E:3C:F1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:4d:f5:17:3a:6d:70:f7:73:e3:63:22:57:60:b3:ed:bd:
         83:3b:01:d9:8b:d3:47:e3:0b:17:27:56:b3:52:e3:8c:74:1e:
         59:8b:03:8a:25:d9:87:04:cb:43:f1:92:39:47:39:6a:08:23:
         26:85:a6:b9:e7:dc:a8:da:cd:8e:5f:bb:fa:7a:75:a8:98:4e:
         0e:9b:9c:9b:39:da:ce:c3:9b:ec:8a:df:df:43:19:b1:ac:b0:
         3c:95:fd:54:4e:75:f9:50:55:4f:4f:ce:b7:27:80:08:fd:36:
         5a:a6:47:ad:de:cc:6f:de:cc:1c:ce:aa:5d:a9:50:18:44:d4:
         e2:f7:45:db:30:9c:22:3b:23:19:4a:c7:f8:7e:79:d2:a9:b2:
         d1:4d:5d:09:9a:46:79:f4:2b:a2:79:52:cc:90:b8:a7:7c:d9:
         b9:a3:90:20:16:1f:46:2e:d8:02:20:d7:16:82:f3:0b:b1:31:
         77:4a:7e:5f:c5:e9:66:57:c2:4e:bb:84:ae:9e:c2:52:1b:b7:
         c8:30:9d:b9:7b:e3:1a:f0:10:b8:20:c2:1c:16:b7:9a:ee:96:
         a8:c6:b7:74:80:dc:d5:cc:7f:6d:84:04:d7:c0:07:42:f3:6b:
         7d:46:a4:ef:c1:4e:f8:b8:c1:4f:a7:80:6f:9b:56:b6:5d:37:
         2b:39:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:13:32 2025 by rpki-client