Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c36e93f5-0f7f-3cd4-9a19-9a941e442f52.roa
File:                     c36e93f5-0f7f-3cd4-9a19-9a941e442f52.roa (raw, json)
Hash identifier:          fwfH0vQWF4elWjts0ObY3FCwyyTfVGM8jts+Jl1ATgI=
Subject key identifier:   12:CE:8F:AD:47:F2:D6:63:13:FA:39:C3:3B:61:D3:75:AA:B3:54:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B233196D26C2C2ABB4E7DD580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c36e93f5-0f7f-3cd4-9a19-9a941e442f52.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1010:b210::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:96:d2:6c:2c:2a:bb:4e:7d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=fe888bbb-0265-46eb-ad99-98a85cde89c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:6f:d9:44:b7:83:a4:23:d6:fc:72:22:02:
                    1a:71:17:35:48:cf:87:79:9d:fd:80:f6:ee:45:87:
                    8e:a0:9e:6a:69:36:bb:92:28:b2:cb:5b:ef:61:e8:
                    87:52:71:39:f1:0b:14:89:d7:97:fe:39:66:d1:93:
                    25:97:fc:b6:54:31:74:95:80:96:f6:9a:d6:70:b8:
                    c5:fd:61:f0:02:b8:da:e8:ff:80:e0:76:d0:1f:b5:
                    2c:f0:05:94:fb:c0:26:b3:4c:ea:f3:52:4a:9e:c2:
                    56:ba:83:44:85:e4:72:12:80:f1:3b:71:c1:e2:c4:
                    d1:48:ad:2b:6f:8a:a5:11:dd:5f:cb:8a:13:e6:08:
                    db:da:ee:22:e1:94:13:24:1b:e8:9a:d5:c9:8e:4a:
                    01:b1:e9:f4:7a:41:83:8b:f0:6b:07:c3:3a:81:f0:
                    f8:75:23:c7:6a:77:5b:fe:19:ea:db:96:3a:57:e9:
                    c7:f0:29:53:ad:23:9a:9d:5c:a5:db:21:2e:01:47:
                    1f:55:d0:b6:18:e3:80:b3:57:c3:00:df:5b:69:ef:
                    8d:c7:33:1a:33:8d:5e:cb:ff:8b:af:4a:f7:0a:b0:
                    7b:4d:9e:c9:96:56:30:41:3f:d1:f6:fa:18:7e:2d:
                    b2:a2:c5:45:7a:de:89:e1:f6:38:ae:c0:0f:a1:bf:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:8F:AD:47:F2:D6:63:13:FA:39:C3:3B:61:D3:75:AA:B3:54:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c36e93f5-0f7f-3cd4-9a19-9a941e442f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b210::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:71:9f:a6:a4:6c:5c:b5:de:53:97:ef:b4:79:a8:88:1d:
         9a:8c:b4:44:3d:51:15:c2:59:5a:11:9b:26:7e:d0:3b:80:32:
         3f:a0:79:96:52:2e:8f:4c:74:8d:cf:ad:b4:0c:da:a8:8b:54:
         bd:06:86:e6:2d:3b:0f:2c:6a:e8:0a:a3:84:e9:34:b7:88:d4:
         c8:9d:55:93:bd:42:45:1a:10:9e:d4:e9:0c:3a:19:06:67:67:
         5c:48:bb:0a:df:e0:ae:29:f6:d8:e7:0a:a9:1b:77:17:dd:b5:
         81:95:2a:1b:e7:6c:0a:58:43:a3:04:32:c5:fc:4c:01:b4:70:
         63:1f:5e:bb:ae:aa:ab:b9:b3:6f:e0:ca:7e:11:bc:73:d7:57:
         69:09:59:29:5f:3d:81:3b:2f:43:34:7e:52:a8:5b:db:ea:3c:
         9f:71:27:c8:61:dd:52:43:0e:85:da:e9:cc:5b:3f:7d:32:76:
         39:ba:4e:a1:6a:fb:cc:c0:3e:98:f4:fb:9b:3f:cd:62:57:ae:
         49:3f:80:17:f2:73:df:1f:a5:c3:72:4c:be:e1:5b:19:d7:68:
         e0:99:65:41:52:03:49:19:08:77:60:1c:a1:a4:a4:6b:c7:68:
         ee:5e:4a:6e:40:07:40:11:62:f9:39:91:f3:14:d2:3c:06:b2:
         7d:36:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:35 2025 by rpki-client