Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19d524fd-604d-36c5-a8d5-41bb0646c7fb.roa
File:                     19d524fd-604d-36c5-a8d5-41bb0646c7fb.roa (raw, json)
Hash identifier:          wGYX5MhJsQUwmqOmoHhKmpfovy41oe48LoXE3QCYDUg=
Subject key identifier:   62:B5:F3:E6:B2:50:25:20:16:60:88:BA:63:CF:40:14:8F:1E:2D:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B389727E4D4E12D36BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19d524fd-604d-36c5-a8d5-41bb0646c7fb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2600:100d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b3:89:72:7e:4d:4e:12:d3:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a168ef01-d605-4e55-8467-5b89884ff13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:12:ce:12:dd:52:d6:8c:0f:56:89:33:b2:
                    3f:69:eb:b7:38:cf:ad:89:a7:6d:1a:c4:f7:21:1f:
                    1e:c5:02:e8:fe:0c:39:72:b0:2b:df:98:b3:09:07:
                    56:22:1a:9a:37:7d:8c:0b:15:41:f1:ea:63:d7:3e:
                    3f:42:0d:2c:eb:f8:33:1b:f6:f0:f9:c8:07:2f:f4:
                    b7:30:f8:19:99:07:0f:8c:e4:05:1f:c7:1c:27:db:
                    69:4e:86:c4:49:0b:33:20:0b:e1:0c:88:0e:50:fe:
                    61:c0:2b:a8:3f:c7:dd:59:e8:26:aa:45:fd:45:84:
                    03:c7:7c:1f:e5:d1:f0:d5:8d:62:de:cf:3f:1c:c4:
                    df:20:69:03:7d:39:85:bb:50:6a:d5:af:59:ff:1f:
                    bf:a7:53:93:6e:1a:93:d4:40:5f:ce:17:1c:2f:6a:
                    a2:92:17:e7:8e:61:05:ad:af:70:c0:c1:6f:61:aa:
                    41:66:2f:ad:3a:d0:7d:26:e0:d5:00:8a:b7:88:0c:
                    e0:32:3a:26:0a:59:c4:36:3c:28:97:b9:e7:76:6b:
                    2c:80:73:17:42:d4:2e:46:50:41:32:f3:7a:a8:68:
                    b7:8c:ec:e5:82:0a:b6:e7:6c:66:70:b0:7f:7e:82:
                    d0:09:11:fd:d5:52:d1:cf:a3:d9:70:2d:00:63:de:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B5:F3:E6:B2:50:25:20:16:60:88:BA:63:CF:40:14:8F:1E:2D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19d524fd-604d-36c5-a8d5-41bb0646c7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:de:cd:27:e1:81:bc:4f:06:52:14:f3:bc:8d:83:1e:0d:08:
         fd:ce:34:b3:2f:ba:b6:02:04:a9:10:f9:d6:5e:4c:c8:a4:17:
         94:05:f3:9b:18:64:43:c5:08:04:33:06:11:62:f1:84:83:41:
         53:57:c1:93:a8:ba:17:17:a8:38:f0:69:bd:87:ab:d5:37:9c:
         b4:50:ee:f3:da:1e:58:b3:01:55:8e:58:1e:50:2d:b9:71:7a:
         53:6c:24:a8:f1:bc:7e:1b:6a:23:fb:2e:22:7e:9c:2b:f8:79:
         02:dd:da:8c:1b:06:33:10:2f:c8:da:b0:57:ba:42:b0:f9:71:
         07:85:c7:59:81:31:55:4d:03:da:04:31:e3:da:c5:78:fb:c3:
         88:85:b8:e0:96:a3:97:a2:17:af:61:30:42:7e:b0:f2:1d:4b:
         34:e7:57:59:ec:47:53:13:48:7d:a7:2b:62:7f:f8:10:a8:eb:
         d4:a2:20:c6:33:ea:bd:ad:e5:e6:7f:2f:17:11:a4:9c:c8:78:
         89:b5:f1:21:42:14:84:7b:77:0b:8c:11:3b:3c:4a:2b:dc:91:
         b7:b5:dc:72:d8:19:2a:41:42:6e:3b:35:b6:e8:f1:00:c9:1a:
         3f:c0:60:be:8c:d0:fa:14:66:3f:1b:93:6e:3c:42:a5:f0:ae:
         15:e9:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:29 2025 by rpki-client