Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7a9133-04ba-3168-a386-9862e7eb87ba.roa
File:                     ff7a9133-04ba-3168-a386-9862e7eb87ba.roa (raw, json)
Hash identifier:          erZZWIJOL/hY4E5RkE4KfWFI9bOO/m2x3iHB1jZvTB0=
Subject key identifier:   2C:4A:FB:60:61:57:BE:E3:62:98:F6:A5:B1:D1:37:AB:BD:12:11:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584909E699C1D1B27F393267E080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7a9133-04ba-3168-a386-9862e7eb87ba.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        2600:100c:a127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:99:c1:d1:b2:7f:39:32:67:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=89576843-767a-4a69-b546-0cee407a9aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:9f:74:2c:61:73:08:a4:a5:1a:ec:a9:14:
                    9f:23:c2:73:85:ef:64:aa:3f:8a:b8:66:95:09:dd:
                    70:ea:a7:78:00:7c:3b:b5:e9:73:af:89:9f:dc:a2:
                    31:cf:11:99:29:28:72:84:8f:e8:dd:08:d1:54:1e:
                    43:ef:ce:c1:8b:95:eb:74:e7:7d:54:18:c2:03:34:
                    5b:bd:96:4e:83:8d:70:86:01:e9:71:d0:00:db:e8:
                    30:3b:16:2e:6d:a7:5b:36:78:8b:05:99:cb:f7:b1:
                    d6:ea:0f:c0:cc:24:af:18:b7:a8:c7:56:7e:0e:60:
                    ab:d8:8e:bf:59:08:97:83:53:67:7e:e3:6f:ca:4e:
                    e3:4d:b2:ca:ed:8a:06:76:36:50:08:c5:20:45:fe:
                    92:d5:5d:c7:b8:45:dd:d0:05:00:94:45:b9:6a:74:
                    5e:83:66:4b:96:5a:86:32:73:2e:81:b1:0c:54:cd:
                    f5:04:cd:11:5f:33:2c:d1:04:90:1b:21:c1:d4:e6:
                    92:e2:de:ba:4e:48:72:c6:54:6c:52:d1:e8:d4:63:
                    27:6f:37:a5:33:dc:88:c9:b5:2f:15:b0:f8:43:1b:
                    c6:5f:fd:1d:aa:9f:0c:1a:7d:c9:05:9b:77:70:f9:
                    ea:0b:dd:90:20:2f:d5:1b:da:3f:51:46:69:21:8c:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:FB:60:61:57:BE:E3:62:98:F6:A5:B1:D1:37:AB:BD:12:11:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff7a9133-04ba-3168-a386-9862e7eb87ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:7f:73:43:ee:a3:3d:56:5e:60:90:49:d7:9b:ac:4b:87:66:
         12:a6:0e:35:fb:a7:20:e7:19:c6:8f:34:67:ba:31:af:33:dd:
         48:1d:a9:1c:70:ee:69:19:e6:10:11:62:80:63:a7:dc:0c:7d:
         b2:1d:d3:ac:3d:13:c6:54:30:2b:70:45:60:3b:bb:44:ba:65:
         ce:10:ad:c8:68:ce:a7:b4:1d:f9:5b:18:38:7b:29:aa:73:6f:
         78:c9:d0:6a:4d:1d:65:1c:7f:26:a3:a3:59:dd:0a:a6:62:6e:
         7d:74:16:63:79:bb:10:5b:31:79:b1:07:26:46:39:16:b3:64:
         5e:f0:14:94:4e:63:b3:1f:a3:3b:76:c0:a1:d0:32:f1:c2:b1:
         f8:f0:05:f0:12:fd:19:ef:8a:31:df:9c:69:13:0a:83:90:aa:
         db:82:51:08:98:f6:0f:a1:b6:d2:dd:65:f1:71:01:48:70:89:
         2a:c7:c6:b8:00:b6:db:f7:ce:7d:15:e1:28:06:69:74:62:39:
         f5:8d:08:86:7a:bc:ef:74:34:7c:48:86:4f:26:56:65:97:1f:
         c5:18:ef:18:e8:68:39:0b:83:06:ff:d7:08:0e:46:75:e2:90:
         5e:23:0d:0e:fd:43:cd:17:63:b8:17:42:bd:96:7c:b3:7c:5c:
         bb:c3:09:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkJ5pnB0bJ/OTJn4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ODk1NzY4NDMtNzY3YS00YTY5LWI1NDYtMGNlZTQwN2E5YWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv2fdCxhcwikpRrsqRSfI8Jzhe9kqj+KuGaV
Cd1w6qd4AHw7telzr4mf3KIxzxGZKShyhI/o3QjRVB5D787Bi5XrdOd9VBjCAzRb
vZZOg41whgHpcdAA2+gwOxYubadbNniLBZnL97HW6g/AzCSvGLeox1Z+DmCr2I6/
WQiXg1NnfuNvyk7jTbLK7YoGdjZQCMUgRf6S1V3HuEXd0AUAlEW5anReg2ZLllqG
MnMugbEMVM31BM0RXzMs0QSQGyHB1OaS4t66TkhyxlRsUtHo1GMnbzelM9yIybUv
FbD4QxvGX/0dqp8MGn3JBZt3cPnqC92QIC/VG9o/UUZpIYwpGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCxK+2BhV77jYpj2pbHRN6u9EhEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY3YTkxMzMtMDRiYS0z
MTY4LWEzODYtOTg2MmU3ZWI4N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDKEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKd/c0Puoz1WXmCQSdebrEuHZhKmDjX7pyDnGcaPNGe6Ma8z3Ugd
qRxw7mkZ5hARYoBjp9wMfbId06w9E8ZUMCtwRWA7u0S6Zc4Qrchozqe0HflbGDh7
Kapzb3jJ0GpNHWUcfyajo1ndCqZibn10FmN5uxBbMXmxByZGORazZF7wFJROY7Mf
ozt2wKHQMvHCsfjwBfAS/RnvijHfnGkTCoOQqtuCUQiY9g+httLdZfFxAUhwiSrH
xrgAttv3zn0V4SgGaXRiOfWNCIZ6vO90NHxIhk8mVmWXH8UY7xjoaDkLgwb/1wgO
RnXikF4jDQ79Q80XY7gXQr2WfLN8XLvDCXQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:31:22 2025 by rpki-client