Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caac98aa-1577-3ef8-9ce1-a18fb8b814c7.roa
File:                     caac98aa-1577-3ef8-9ce1-a18fb8b814c7.roa (raw, json)
Hash identifier:          QnburvbZMU/XhGiRT2UTgdJ76LINUjtm2IgdNOqSttg=
Subject key identifier:   D2:99:10:9F:62:42:C5:92:AF:71:52:20:C5:88:84:C6:0F:21:90:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B45F8550DF6D84289A6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caac98aa-1577-3ef8-9ce1-a18fb8b814c7.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b0e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:45:f8:55:0d:f6:d8:42:89:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=68e3e8d8-a579-48a0-b7d1-0f317f22cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:43:d4:e1:c2:56:81:33:74:70:3f:aa:c7:
                    00:89:c6:5a:53:34:d7:2a:ad:7e:69:e4:da:eb:c2:
                    bc:5a:05:4d:e9:1d:ef:39:78:d3:81:dc:d6:5a:59:
                    b3:0a:83:8c:e9:0f:86:ca:64:ab:a5:67:fe:c7:68:
                    54:d1:12:e3:4a:d3:f5:b2:10:02:94:55:64:c2:ec:
                    72:50:dd:5b:61:df:78:90:3e:04:bd:64:1f:e5:95:
                    38:d7:c3:70:ab:c3:98:15:c9:7f:b8:41:d3:85:0b:
                    fc:5f:3a:b9:bf:45:a0:59:06:b1:87:d4:bd:c5:4c:
                    89:71:75:b0:34:18:a2:18:1b:75:df:ef:14:e8:3b:
                    a0:55:bd:8f:2c:1d:1f:27:b8:76:6c:a5:95:e9:4b:
                    e8:b2:be:e5:5f:25:4a:60:be:e5:bb:5c:cd:f6:dc:
                    81:17:89:bc:88:20:0a:a4:fb:06:b4:63:61:a9:c1:
                    6f:82:3d:05:25:b3:05:72:12:1f:0d:32:82:5d:35:
                    ff:72:f6:92:fe:dd:a8:e9:66:ad:e1:33:ff:0c:ac:
                    34:b1:02:fb:3f:b5:e4:3a:f4:01:b2:79:cf:40:ee:
                    70:3b:42:23:99:40:a1:b1:44:98:85:22:d3:07:87:
                    a9:8d:a0:aa:d6:e1:67:89:3c:35:e1:5b:07:29:82:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:10:9F:62:42:C5:92:AF:71:52:20:C5:88:84:C6:0F:21:90:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caac98aa-1577-3ef8-9ce1-a18fb8b814c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0e6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:70:ab:53:37:91:f9:7f:f5:45:28:64:55:31:6d:18:d3:
         38:c8:e9:62:fb:53:58:c4:dd:10:17:19:9f:0b:df:59:4c:a4:
         2e:9a:d9:ff:a3:ac:26:d6:62:47:8b:8c:e4:09:af:e8:c1:c0:
         bb:59:3f:23:81:f5:7d:7d:46:a4:a2:c2:e0:d4:3d:16:61:8c:
         4e:cc:67:3f:d1:75:82:68:26:de:d3:61:09:8d:1d:ac:f3:b2:
         2c:88:b1:1a:17:84:3d:d3:3f:e0:02:8b:40:6d:ea:c2:78:c5:
         1f:25:23:23:26:61:fd:70:a7:ef:7c:9a:73:3b:9a:01:57:02:
         e8:3b:2e:d8:c3:d3:18:af:2a:66:ab:f0:35:3d:be:6b:ed:fa:
         a4:9a:23:fc:a3:b4:49:86:28:71:ef:1b:1c:c8:5f:4c:63:55:
         03:25:4f:dc:98:dc:25:f0:d5:5f:a5:97:60:49:c8:f2:d2:b3:
         55:d9:43:8b:bc:2d:5a:b4:31:a1:06:49:53:cd:d0:e5:63:2c:
         4b:e8:92:69:93:f4:7d:8a:0b:fa:89:fc:d1:63:9d:03:a1:40:
         87:a6:5c:11:67:a8:78:e2:f0:df:18:65:7a:01:c4:47:85:f1:
         f1:ff:ef:c7:3d:7e:d1:0d:a2:62:71:f7:82:11:27:45:44:de:
         f5:ff:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:37:56 2025 by rpki-client