Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa
File:                     b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa (raw, json)
Hash identifier:          UuIvjFBSCX+3kvLdsqbdwlm2BtOk0SvOi5xLCxIjuJc=
Subject key identifier:   9E:45:BD:4B:1F:5E:F3:A3:D1:91:F7:63:56:CD:33:07:A0:99:68:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AF256A8403367AA5DE5C445B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:100e:b250::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a8:40:33:67:aa:5d:e5:c4:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=a31af1f8-aa99-4778-985f-7954af6e6056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:05:55:6b:37:f7:3b:f0:bf:08:1a:a0:fc:
                    8c:60:95:22:4e:b2:cb:6f:75:60:5a:e6:6f:f1:e8:
                    1d:b0:80:14:93:34:38:d1:ef:dd:20:5b:11:b7:6b:
                    30:c6:65:5f:a3:24:82:6c:87:dd:0a:14:51:23:f8:
                    cb:53:ad:cd:15:71:de:1e:56:80:59:5b:79:ea:fa:
                    58:36:23:32:47:9c:7c:ea:d0:fd:7e:5a:c8:ef:62:
                    b8:0e:55:5e:40:22:d4:64:be:ab:c4:8b:a1:72:b2:
                    42:df:3f:52:e7:4e:c1:d9:e1:bb:56:32:f7:74:3d:
                    7b:cc:f7:c1:30:0d:7f:73:60:c4:40:7e:ce:5a:f1:
                    7e:b1:90:3f:b4:da:e3:5b:f8:e2:af:e3:dd:d6:56:
                    eb:63:cf:18:90:65:59:c3:89:5d:60:55:73:fe:ce:
                    74:51:2e:87:43:32:5d:e4:f5:91:ab:a3:6e:17:ec:
                    bb:f0:6c:7c:9f:47:4d:b5:7b:2b:ca:e4:27:d7:60:
                    cf:96:0e:93:e2:08:b9:3c:27:0d:98:44:d6:0f:9e:
                    34:e1:76:c0:c0:44:36:66:de:5f:74:e9:76:cf:a1:
                    ad:c9:c8:f5:aa:7b:70:ea:c4:7d:8f:2d:16:8c:7e:
                    af:26:d5:60:21:35:f6:d7:af:17:e4:2c:c9:95:c7:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:45:BD:4B:1F:5E:F3:A3:D1:91:F7:63:56:CD:33:07:A0:99:68:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6db9d28-8c6b-3b3a-855e-fd160100eb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:4f:02:ba:7b:61:b6:87:2d:ef:ad:95:cc:41:ad:cb:08:
         8b:80:36:d9:f3:58:ac:29:fb:a2:61:e5:67:bd:67:eb:99:40:
         1b:65:6d:49:ba:e7:b5:e6:d1:b7:f2:1f:24:90:f3:5d:a8:09:
         79:57:16:b1:45:10:33:12:03:10:b2:77:50:ca:9b:d6:38:85:
         0b:dc:b4:f3:c3:08:34:2c:0b:fe:e6:18:a6:4f:11:8a:ae:39:
         dc:fd:21:01:2e:7a:b2:67:f7:5d:96:24:f8:e5:09:f1:b7:60:
         18:a3:33:bc:10:16:f4:be:6c:2a:b4:a3:00:68:25:f2:36:1c:
         1e:3f:b6:f0:c0:3a:24:cb:67:ad:60:73:18:13:a9:13:bd:41:
         a4:85:d2:a5:f6:34:64:31:24:93:7c:03:d7:e6:c1:b3:f1:d9:
         6f:58:59:1a:32:93:61:2b:71:92:ab:05:f7:33:ba:2f:52:00:
         5e:56:3e:93:c5:35:1f:e8:d4:a9:3b:09:f6:61:85:22:26:10:
         44:05:10:13:71:6d:98:1b:8a:d0:7e:8b:c1:fb:ec:6c:b3:08:
         ba:2d:bf:75:8b:77:af:a5:54:08:58:60:6f:1d:44:b9:02:c8:
         d1:44:97:4f:43:42:6f:bd:ad:7e:0f:0e:84:9b:b4:71:ce:a8:
         3a:92:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:22 2025 by rpki-client