Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e89899e-d2eb-3d27-835d-338cbc673f6e.roa
File:                     0e89899e-d2eb-3d27-835d-338cbc673f6e.roa (raw, json)
Hash identifier:          Y8yLc39zpmU+HRyZw9GzNXxOYVrfjRhkDISDt1xZ+to=
Subject key identifier:   AA:7C:3D:C7:A8:D2:E4:88:AE:73:1E:44:D0:1D:CE:D7:17:06:8D:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1175F96B65A8B32E1C2880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e89899e-d2eb-3d27-835d-338cbc673f6e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:b080::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:75:f9:6b:65:a8:b3:2e:1c:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=6f6caed3-10ba-42a8-a5b6-4552fd1ae26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:3f:65:3f:65:4b:8b:88:e3:ea:90:9d:2c:
                    e3:8f:8d:4c:7c:ef:b6:67:15:80:14:3f:6d:de:dd:
                    b2:4f:86:e6:29:3d:59:35:a1:d4:b6:61:2c:16:9f:
                    b3:b8:c3:a7:c0:5f:74:5b:8b:81:2a:c2:6c:06:c1:
                    10:53:ca:cf:d4:55:52:8a:f3:15:27:32:45:a4:9d:
                    69:e5:84:a2:73:61:93:19:f0:94:fa:90:30:a7:8a:
                    81:ce:15:57:da:22:97:b9:b5:6a:73:6b:9c:6f:4e:
                    b1:54:87:59:b7:e8:31:07:5d:24:80:55:0e:26:5f:
                    b4:84:85:76:43:c2:77:6f:8a:ca:fc:e4:de:f7:8c:
                    c7:0f:7b:af:34:db:82:c3:10:fd:be:45:94:89:8f:
                    df:67:92:c1:17:f9:bb:49:7d:fb:19:34:cd:26:ab:
                    5b:ce:12:2c:74:45:37:4e:b7:9e:f3:eb:80:9f:86:
                    6f:fc:aa:8d:44:9d:9f:dd:6b:ca:42:d3:72:a7:f6:
                    39:93:af:6e:f0:12:c4:60:8c:e4:8e:fe:bf:bf:77:
                    cc:1d:cf:b6:78:34:2d:e7:cc:74:da:4a:a6:72:d8:
                    72:f9:48:d1:a3:cb:7b:5a:8e:78:5d:32:05:02:aa:
                    bb:d4:67:c1:74:b8:2e:08:b6:17:06:55:ee:c1:14:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:3D:C7:A8:D2:E4:88:AE:73:1E:44:D0:1D:CE:D7:17:06:8D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e89899e-d2eb-3d27-835d-338cbc673f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b080::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:cb:d7:57:fd:8a:54:dd:f2:88:aa:89:fa:d1:c4:68:27:9f:
         13:b5:db:52:a4:f0:fa:d4:3b:32:8b:f5:0d:df:d4:8e:21:6e:
         6f:37:13:21:4a:d3:7f:f1:7e:51:8e:d0:fc:79:c4:7b:a7:45:
         29:8c:2f:02:f9:1f:1e:14:db:e1:20:6f:38:ee:43:85:aa:b9:
         e7:5c:18:37:9d:db:7f:02:3b:ae:00:2a:d8:a9:21:02:36:b1:
         51:4f:35:e1:6e:70:40:31:62:ba:86:ae:8f:72:fc:02:1b:9d:
         a2:d3:00:92:38:c4:66:cc:fa:45:82:47:5c:04:64:c7:b7:45:
         af:c4:7a:77:73:14:b5:59:34:a7:3a:c1:9f:28:a9:ed:dd:76:
         61:4b:13:e1:d0:3c:63:4c:42:e9:5a:0a:10:31:cb:88:db:98:
         f3:22:9a:0a:e8:50:1f:56:21:f1:ee:53:9c:66:5c:fb:3f:67:
         38:1b:72:f5:e1:f2:44:f4:ac:23:6c:89:b7:26:bb:51:67:2d:
         c8:3e:28:7c:ca:5e:9b:45:91:0e:b4:89:80:88:3a:0c:fd:52:
         31:08:c0:6d:f5:02:d8:e4:05:94:42:36:ff:79:7d:b4:14:a9:
         a5:fd:01:09:47:4b:81:78:91:58:43:aa:eb:0d:18:15:d4:54:
         0b:0c:c2:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEXX5a2Wosy4cKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NmY2Y2FlZDMtMTBiYS00MmE4LWE1YjYtNDU1MmZkMWFlMjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosY/ZT9lS4uI4+qQnSzjj41MfO+2ZxWAFD9t
3t2yT4bmKT1ZNaHUtmEsFp+zuMOnwF90W4uBKsJsBsEQU8rP1FVSivMVJzJFpJ1p
5YSic2GTGfCU+pAwp4qBzhVX2iKXubVqc2ucb06xVIdZt+gxB10kgFUOJl+0hIV2
Q8J3b4rK/OTe94zHD3uvNNuCwxD9vkWUiY/fZ5LBF/m7SX37GTTNJqtbzhIsdEU3
Tree8+uAn4Zv/KqNRJ2f3WvKQtNyp/Y5k69u8BLEYIzkjv6/v3fMHc+2eDQt58x0
2kqmcthy+UjRo8t7Wo54XTIFAqq71GfBdLguCLYXBlXuwRR7/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKp8Pceo0uSIrnMeRNAdztcXBo0fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGU4OTg5OWUtZDJlYi0z
ZDI3LTgzNWQtMzM4Y2JjNjczZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQELCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJzL11f9ilTd8oiqifrRxGgnnxO121Kk8PrUOzKL9Q3f1I4hbm83
EyFK03/xflGO0Px5xHunRSmMLwL5Hx4U2+EgbzjuQ4WquedcGDed238CO64AKtip
IQI2sVFPNeFucEAxYrqGro9y/AIbnaLTAJI4xGbM+kWCR1wEZMe3Ra/EendzFLVZ
NKc6wZ8oqe3ddmFLE+HQPGNMQulaChAxy4jbmPMimgroUB9WIfHuU5xmXPs/Zzgb
cvXh8kT0rCNsibcmu1FnLcg+KHzKXptFkQ60iYCIOgz9UjEIwG31AtjkBZRCNv95
fbQUqaX9AQlHS4F4kVhDqusNGBXUVAsMwsQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:58:36 2025 by rpki-client