Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa
File:                     ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa (raw, json)
Hash identifier:          g0f8bUfasD5OOg/IrfIijB27z+EwqNz+wyjodoEH6Js=
Subject key identifier:   62:C8:EE:54:C9:6F:67:A0:3C:18:A8:A6:1C:6D:C5:5A:17:B4:FB:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C98B5E73BD8C8753E4B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:a0ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:98:b5:e7:3b:d8:c8:75:3e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d684687f-51c3-481a-820d-17e3dd495c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:1b:29:c8:f0:14:52:15:23:2d:13:bc:6a:
                    fe:88:db:a8:29:e8:1c:77:b0:65:78:aa:2c:24:ed:
                    33:9f:63:03:97:ae:12:a4:ff:ed:ee:28:71:d0:f1:
                    2c:74:ad:92:f5:ff:78:dc:c0:fe:4d:e2:67:0d:6a:
                    64:f7:b0:50:54:8f:02:9e:98:88:46:16:00:85:0c:
                    07:b7:49:4f:72:bc:74:f7:b6:e8:67:94:6e:ee:be:
                    85:aa:7f:52:0b:59:84:e7:5f:ff:79:24:14:58:4c:
                    6f:e5:61:b6:9d:e5:a1:a0:f8:13:69:75:3c:c4:29:
                    ba:ee:8b:3c:7c:f3:2e:c0:0d:2b:5e:8d:bf:b5:01:
                    75:13:2f:b1:27:2a:65:0d:35:df:cd:40:b2:77:8a:
                    ef:d5:4e:1c:2e:82:9b:e5:9d:c8:c3:4b:d8:63:1d:
                    c0:95:48:3d:df:32:1d:b2:43:16:48:a9:c0:56:e1:
                    9d:2a:68:79:6d:74:d8:ae:88:15:a9:7e:9e:0e:7f:
                    b6:ef:73:84:24:db:10:8b:5d:d5:f1:1e:9d:1b:b4:
                    9f:49:c4:5e:28:e5:22:d8:23:00:24:9b:25:27:8f:
                    7f:e3:70:5c:1c:84:4b:79:e7:15:63:cf:2f:d6:2f:
                    03:9d:cb:70:b2:10:cc:3b:ff:59:47:f8:ad:cc:cf:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C8:EE:54:C9:6F:67:A0:3C:18:A8:A6:1C:6D:C5:5A:17:B4:FB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:77:1c:06:d8:77:6c:b1:e5:17:f7:c1:fd:c0:44:5f:89:c9:
         19:e6:03:4c:41:39:53:62:c3:94:35:1c:3f:d3:4f:5a:dc:9a:
         b9:95:07:18:45:f7:ca:bd:23:63:0e:ce:f2:6a:cd:6d:e5:8b:
         80:e9:91:4d:97:59:6e:c2:4c:7e:e6:8e:f7:1e:cc:a7:cc:9d:
         33:80:69:35:e8:fe:d4:b5:b2:19:65:ea:36:ba:d1:09:aa:9a:
         e7:45:70:84:37:99:94:cf:a7:e1:56:bb:53:73:a4:80:72:57:
         ea:26:a7:dc:cd:02:67:0a:6d:53:67:bc:4c:00:bd:ed:87:84:
         02:5b:c5:ed:ca:5a:b1:ff:23:14:a3:72:53:48:e2:a9:37:95:
         37:1a:b2:aa:20:e9:66:4c:6a:b8:85:48:70:97:f8:52:3b:e6:
         6f:ac:97:dc:27:9c:4b:42:11:7d:67:f7:9c:0b:da:d1:a4:22:
         86:59:aa:98:aa:bc:24:9a:63:d4:b6:a0:ec:cd:41:f9:6f:8f:
         30:4b:7c:21:2d:8d:64:89:fa:44:ac:8a:6e:56:1e:1b:b8:e3:
         5d:0b:54:51:df:b3:37:0d:6b:fe:b7:a3:0f:9f:44:b4:1b:6c:
         f6:da:d3:f2:4b:86:85:34:59:95:f2:5f:71:52:a4:1e:6c:45:
         bc:f0:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:24 2025 by rpki-client