Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa
File:                     ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa (raw, json)
Hash identifier:          mZj18OqXrfpp2YUwrg+A2E1MqqPDndspbSOdcte6yTY=
Subject key identifier:   10:89:43:17:67:BA:77:5F:34:44:E8:18:5F:83:B2:0B:42:54:29:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC9DBA9FEDCF403D959FF5400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:a023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a9:fe:dc:f4:03:d9:59:ff:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=f26a9f60-66d2-4f49-95a3-226d87a37311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:8c:e3:36:a4:1d:6e:32:59:7e:71:44:b9:
                    04:7e:83:f2:3b:91:5f:f4:22:4f:ae:d7:3e:ce:2d:
                    eb:08:c3:50:41:7c:04:06:29:78:60:0e:66:e1:aa:
                    39:75:12:c2:4b:45:75:73:47:cd:db:07:cd:14:f9:
                    8d:c2:a5:f3:d6:2c:69:82:ec:f9:40:62:a9:3e:72:
                    9e:95:65:d6:e2:1b:99:92:78:35:ae:dc:0f:39:9f:
                    f7:be:7b:e6:10:6e:3c:29:94:aa:e3:84:8f:4c:9a:
                    37:98:1c:87:b5:67:2c:30:ee:77:e8:3d:7d:77:1a:
                    db:4c:6b:c2:2d:4c:5e:ad:4c:e5:a8:70:a7:5a:a4:
                    66:fa:54:44:ff:f1:c1:e9:52:fd:6a:4a:d3:5e:ba:
                    fb:94:2c:33:d7:7f:a2:d5:79:9f:95:60:1f:88:34:
                    43:f2:65:46:72:f1:4a:09:9d:20:ae:b9:47:5d:7b:
                    8f:95:5e:a4:c3:46:7b:5d:48:e8:d3:7d:eb:47:34:
                    82:78:53:1c:4c:33:6e:b7:d3:29:42:46:47:87:c8:
                    3a:d2:fa:bd:a6:20:90:6b:d1:56:56:d3:97:e9:97:
                    6d:c9:eb:b4:06:29:79:d1:4b:89:7b:c3:b4:80:a3:
                    89:e5:61:dd:d7:10:0b:d2:5f:31:9b:ad:f1:7f:a7:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:43:17:67:BA:77:5F:34:44:E8:18:5F:83:B2:0B:42:54:29:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:e4:44:eb:2e:fd:71:b2:8c:9e:62:07:c5:fe:7b:b4:c0:
         2d:fb:ee:b5:4f:dd:48:98:ab:e3:f5:a6:4d:30:af:95:1a:57:
         9e:35:c2:cf:8d:c7:09:92:f3:c3:ae:27:a2:20:e8:a0:bc:d1:
         1e:6a:5b:ac:94:52:55:ef:ec:50:90:c1:20:36:3d:77:bd:49:
         72:83:ce:7f:10:0a:36:23:5a:23:3d:d4:40:0c:41:01:a4:d9:
         26:eb:bb:02:f5:c7:c5:ef:1b:2c:a3:a8:a8:1c:ee:5d:32:a8:
         01:cc:a8:15:6f:65:97:af:4b:b0:84:70:c2:26:00:e1:4d:4e:
         6e:ce:87:68:2c:a1:4a:e3:24:31:00:58:91:e9:6a:d3:d1:f3:
         d5:06:58:7f:60:3f:08:24:a3:68:6b:81:6c:3f:ff:b3:10:b4:
         ec:79:e2:bc:41:9f:91:cf:bf:7d:77:ca:84:e1:8e:75:ae:d1:
         cb:45:af:13:d6:f8:73:61:e8:b1:32:3a:bd:d6:d4:c1:c3:0b:
         f6:a3:c8:02:60:7a:e5:bf:18:41:83:fe:a4:34:0c:d4:fe:57:
         80:18:09:73:28:89:2b:b4:d3:71:aa:a5:46:ba:72:e8:cc:cd:
         46:ea:7f:fe:5d:96:71:e6:58:45:58:fb:d6:ce:d2:08:cf:88:
         eb:e4:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:02 2025 by rpki-client