Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d979fbbc-d93b-3c70-9e5a-c67316f44362.roa
File:                     d979fbbc-d93b-3c70-9e5a-c67316f44362.roa (raw, json)
Hash identifier:          J7abJR7jQXB01Uy7dkHmHwixA18+q3lcWuY7tVC3nTE=
Subject key identifier:   0A:8C:95:66:DA:4B:46:62:E7:44:F9:98:93:48:3B:AD:8D:D3:B7:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F105B7F79FD3C65DFCE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d979fbbc-d93b-3c70-9e5a-c67316f44362.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b1c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f1:05:b7:f7:9f:d3:c6:5d:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5ca38329-ee5f-4f69-babe-0bd8c7ae7f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:c3:1f:4b:bc:56:52:eb:b3:bd:ae:33:6f:
                    8b:23:6e:38:e9:d3:94:bb:94:62:33:92:bc:ee:3e:
                    ac:6b:60:79:d3:bb:77:b7:a9:8e:79:c6:ff:74:d6:
                    ce:34:3a:7f:98:19:d8:80:6e:52:83:79:3a:36:a7:
                    47:f1:76:a4:2c:8d:90:20:ea:53:0f:59:a9:c8:b8:
                    f6:71:03:81:47:a8:d0:20:f6:8a:3b:c5:ab:0b:48:
                    89:12:1c:c2:f6:e1:02:15:47:20:cd:59:13:92:76:
                    17:0d:e3:b7:a2:91:7e:ab:9f:9d:e9:90:c2:ad:a0:
                    56:63:3b:4b:96:41:d7:e3:84:9f:c2:3a:aa:aa:d1:
                    c7:d6:3e:0f:ca:e5:14:b5:f0:0c:f9:f5:14:46:c7:
                    33:dc:1f:34:87:cd:5d:d4:b5:04:c2:ca:05:b2:c6:
                    44:9f:80:34:bc:46:0a:45:7f:ee:32:ba:f4:87:6b:
                    e8:69:cd:01:fd:88:c6:c8:f3:45:fb:10:70:47:be:
                    97:0f:e3:95:ba:4a:78:e7:37:f9:8a:71:76:4c:a6:
                    5e:2c:65:12:37:21:62:8a:d4:5e:13:d2:f5:cd:dc:
                    a1:3a:e9:28:ad:6b:59:0a:1d:f7:df:89:08:1d:b7:
                    c1:62:fe:0e:5d:10:54:b4:8f:da:f4:f0:8a:a4:44:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:95:66:DA:4B:46:62:E7:44:F9:98:93:48:3B:AD:8D:D3:B7:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d979fbbc-d93b-3c70-9e5a-c67316f44362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:6b:ea:fb:8e:a8:01:b1:ce:ff:78:a8:08:16:7b:49:dd:
         2e:3d:2e:d7:99:f3:93:f8:a0:83:c5:14:0c:fd:a2:b4:95:5e:
         b2:fb:fd:4e:89:65:87:dc:33:49:bb:2a:27:e4:50:4c:fe:8a:
         ad:93:85:d2:32:72:1f:9a:21:c6:8e:ce:f8:b8:d8:80:44:8d:
         be:55:fe:44:49:8e:c5:f5:4b:50:d7:ab:a7:d2:23:c8:52:df:
         35:9c:20:d6:68:a3:1e:24:f1:d2:6b:3a:c0:ea:43:9c:2c:b3:
         17:9f:f4:b7:a2:31:8f:35:6c:3e:f3:5e:fa:91:18:17:6a:49:
         4b:4b:87:55:d9:2a:a0:9f:0c:1a:69:f4:dd:cf:2c:09:f1:7b:
         68:ce:6c:d8:d7:b1:ec:40:f1:47:79:82:e0:c1:df:9d:fd:e2:
         f9:01:cc:51:9b:6a:80:84:72:c6:07:aa:d1:25:08:8b:df:71:
         27:3d:5e:3c:d3:5e:65:54:d6:ef:d5:1d:0f:6a:51:ec:d4:74:
         4d:4e:9c:5e:00:14:f5:c0:b2:9d:83:06:de:e6:e4:32:37:e2:
         3f:66:5c:bc:2c:20:18:48:e1:ec:93:fd:03:7e:72:02:7b:3d:
         32:66:4e:71:37:2b:38:77:68:08:bf:55:27:17:f2:1b:d5:61:
         83:e7:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:47 2025 by rpki-client