Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa
File:                     0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa (raw, json)
Hash identifier:          wsqJxDb9gIYG8oHXMtoKYCtRK/ubZSFmoIFwxgUbaP4=
Subject key identifier:   C1:52:AA:01:2D:E1:C0:A1:A6:E1:46:D6:0E:6F:D8:C5:EB:4A:33:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7C8A547BE849012B8B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:b0e2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:7c:8a:54:7b:e8:49:01:2b:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=c9307fb7-388d-499b-a63e-754b4f18fd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:51:2d:a2:20:da:7b:a2:d2:64:8a:1b:d4:c9:
                    e0:90:54:64:03:bb:25:92:37:fc:50:34:aa:5e:25:
                    3b:51:81:4f:09:a4:8e:29:54:f7:30:3d:60:93:18:
                    d0:08:e6:49:12:eb:9b:35:5e:d1:ee:35:33:60:4a:
                    66:81:e4:70:a0:04:be:66:ad:bf:12:8d:08:e0:aa:
                    ac:72:1f:55:9f:7e:2c:ed:a1:34:92:93:42:c7:e3:
                    ea:f2:54:1c:f6:d7:0b:e1:61:bc:07:b4:ce:3f:90:
                    9f:15:a5:3e:11:a8:15:4b:4d:27:ce:38:85:be:87:
                    ea:c1:8a:7a:67:4e:91:ef:8b:09:6e:27:d3:46:90:
                    a6:cf:51:0e:84:a2:0d:cd:f2:ed:58:66:23:93:59:
                    c4:64:aa:93:0a:83:55:d4:94:1a:df:80:50:d1:f4:
                    7e:14:05:a9:9c:66:89:30:f8:43:24:d1:ba:b2:0f:
                    76:d6:16:d1:01:d0:cc:53:ed:44:37:d3:15:6e:2f:
                    83:db:9c:7b:1c:af:6f:3d:69:df:4e:95:a9:07:be:
                    ce:76:9c:45:fb:93:15:11:b5:18:ae:20:10:1a:5c:
                    79:9f:42:b9:6a:6c:86:6e:c2:cd:73:21:ed:27:92:
                    68:63:f2:3c:84:8a:84:b7:74:f3:f0:2d:2f:77:f5:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:AA:01:2D:E1:C0:A1:A6:E1:46:D6:0E:6F:D8:C5:EB:4A:33:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d4e7979-0ecf-3c08-947a-3adccfcb24c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b0e2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:87:69:4e:21:51:41:76:71:8d:ad:76:33:8e:fb:c4:1c:0e:
         e8:78:18:34:3c:76:ba:69:0a:e1:71:05:26:55:17:45:71:32:
         f8:a7:8d:49:ff:61:4f:c0:9f:01:4d:b7:c5:20:74:a6:81:84:
         be:92:0f:ae:c1:36:9e:ec:56:d8:1f:4a:93:73:8a:24:75:b6:
         1a:33:21:18:bd:f6:48:90:c7:ef:f3:e8:e8:fe:0a:0f:56:3f:
         20:93:14:5b:ac:b1:30:c8:d7:9d:ab:9a:d6:05:aa:5f:57:6f:
         f3:e7:40:02:2b:66:e7:1d:d6:11:54:de:5a:e8:ed:9c:c7:90:
         97:1a:8e:ea:c8:59:87:56:36:d8:dc:1d:61:a1:20:70:1a:ba:
         c0:eb:33:e3:f3:08:7b:cf:f4:e9:e1:49:71:95:e4:2c:79:8d:
         33:c0:86:ec:aa:62:7b:20:f0:87:51:0d:ff:ea:df:17:10:e2:
         02:0f:07:0d:f9:43:07:b3:ea:50:c0:1c:61:9f:86:a1:01:24:
         06:3b:48:be:e4:31:36:16:c5:60:c7:4d:8f:aa:2e:56:f6:e2:
         bd:f4:98:f8:2d:e6:79:64:5b:d2:5c:2f:9c:d1:47:9f:76:18:
         c3:59:c0:50:96:6f:f3:8f:e8:10:e9:8d:4a:33:a6:72:83:7b:
         8c:ac:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:40 2025 by rpki-client