Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb360db9-f9f3-3cc2-85e5-53d2691e541d.roa
File:                     eb360db9-f9f3-3cc2-85e5-53d2691e541d.roa (raw, json)
Hash identifier:          QkO+BPRxooD094ZclQpTS4ldY/ARGJp+++uJuxXJYGY=
Subject key identifier:   AE:83:C8:E1:37:F4:A3:4B:4F:6D:A4:72:72:A7:6E:14:5B:0F:69:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117A5963D34CDECC14DC38
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb360db9-f9f3-3cc2-85e5-53d2691e541d.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1013:b040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7a:59:63:d3:4c:de:cc:14:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=04ca6f21-f27c-48fd-af4f-795f188ee196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:18:31:be:d4:87:74:72:b3:fe:6d:8f:b7:
                    97:70:17:aa:24:e8:e7:6c:4b:77:b8:34:2e:15:46:
                    dd:7c:94:2e:76:ee:fa:bd:cd:b1:c5:60:2e:35:cf:
                    8d:94:b9:c4:30:1b:3e:24:7b:f0:7c:14:09:c8:b0:
                    28:17:a2:cf:63:4b:11:07:01:2d:07:c2:24:ce:a3:
                    38:49:50:e4:f2:ce:b7:cb:c0:b4:ad:f7:49:a8:ed:
                    ef:06:68:8e:eb:0b:dc:84:d7:98:f5:d9:c4:74:8e:
                    a1:82:ef:db:cf:99:8c:f4:ea:45:b0:81:f3:04:1d:
                    41:2c:87:83:ab:48:f3:4a:fa:18:18:e0:df:77:8a:
                    c0:b0:eb:aa:d8:c6:31:d6:37:5b:c1:de:42:b6:4c:
                    39:bb:32:5d:65:32:b9:27:64:8d:d7:6f:78:c5:5e:
                    bc:39:3d:24:88:ef:4a:db:41:83:05:66:e1:91:9e:
                    3b:b0:23:42:4c:13:11:8b:c6:4f:29:9c:96:8e:f2:
                    94:92:cd:2f:64:c6:e2:ac:0a:3a:ab:3e:3e:c6:1f:
                    97:63:db:b0:4f:31:a3:f4:31:46:43:f3:a2:81:e8:
                    ae:5b:2a:e3:2c:ce:86:78:81:90:33:4c:bf:67:0a:
                    c5:bb:5e:51:3d:e8:06:94:a7:1f:24:87:0d:05:1b:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:83:C8:E1:37:F4:A3:4B:4F:6D:A4:72:72:A7:6E:14:5B:0F:69:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb360db9-f9f3-3cc2-85e5-53d2691e541d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1013:b040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:13:89:27:be:b0:67:0e:b2:4a:27:ef:10:91:f9:3f:ae:e3:
         00:bf:af:6c:0a:ac:fa:ba:7c:aa:2c:f7:58:ec:d7:c4:09:c4:
         3e:f7:88:7c:e2:9b:2a:41:0b:86:77:36:ad:fb:16:ad:2c:c8:
         b7:f6:f8:8b:31:96:82:f6:b3:d6:6b:62:aa:46:cb:c3:5d:72:
         d6:c0:6c:00:2b:54:c6:d5:8b:e1:87:02:23:54:94:70:89:54:
         ac:09:99:63:dc:15:76:b0:ef:d1:45:5d:dc:70:8c:8c:d8:1d:
         af:f9:a5:11:00:47:f3:8d:8a:2c:09:84:93:2b:b4:3d:ba:07:
         50:c8:b1:22:82:d3:78:a0:cb:3e:98:a4:8e:b4:71:90:b8:c1:
         e8:ad:7e:01:a8:b5:30:cd:a7:9a:65:5c:b8:0d:f6:75:2d:04:
         a5:be:9f:21:e1:ee:b6:c3:e1:ff:4d:7f:12:db:0a:96:a0:f7:
         bc:22:ad:c7:44:e6:9b:54:d9:ad:1a:f1:55:7f:2a:c7:f2:d9:
         9d:e9:6d:75:e7:57:54:2b:2a:38:02:67:86:b9:33:11:02:e7:
         f0:b7:4e:7f:21:9b:ce:11:38:5b:2e:92:bd:da:6c:16:36:91:
         48:87:2a:c4:b0:f6:65:d2:8a:95:92:81:0f:33:80:61:9e:49:
         e9:f9:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:44 2025 by rpki-client