Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa
File:                     14859ff9-2ff0-3259-8eec-85420d4c126d.roa (raw, json)
Hash identifier:          BPbUZbsHZEPwQufG8GAYXRjRsIPfBc+60BgsmxL6WKc=
Subject key identifier:   AF:5A:27:01:FA:6F:F2:A2:F1:B9:9C:6A:99:20:02:31:6B:F6:1D:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6E91FD9A10A2FF52D3992070
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:a032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fd:9a:10:a2:ff:52:d3:99:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=b7407cfb-a7e6-4fc3-8d03-41c66ddf059d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:5a:6f:90:08:07:2c:06:1e:94:d8:cb:30:
                    5d:f5:8d:20:ee:17:6e:6c:bc:2b:72:cf:3a:97:94:
                    a3:ff:3f:cc:4c:9e:25:59:9f:6c:af:27:3b:52:5b:
                    e8:d3:3b:ed:98:4d:b1:6d:5a:32:79:f5:4c:e7:53:
                    d0:51:30:82:1e:93:ba:74:dd:26:7e:31:12:c7:22:
                    6e:82:c5:2a:b3:50:95:6c:21:92:90:5c:35:35:1c:
                    29:f1:eb:ec:9e:5d:22:5c:2d:60:e0:9b:ed:11:7e:
                    87:81:94:cb:40:88:4e:1c:30:4d:f3:fc:b9:5d:a2:
                    e6:3f:9c:83:01:96:c7:4b:28:da:70:19:66:da:99:
                    5d:c6:a2:38:cd:08:5e:ea:5a:71:b6:11:90:b6:98:
                    65:80:c0:63:13:f1:f0:a0:e5:db:cd:21:99:90:a2:
                    a8:3e:96:1d:1d:76:fb:b3:ba:c3:f5:37:bc:70:4b:
                    81:0e:24:9e:3b:b2:eb:ae:c7:15:ee:5d:eb:88:00:
                    6b:a0:7d:ea:f8:38:5d:73:0c:ac:ad:7c:42:9d:a8:
                    35:77:31:f8:f2:5e:aa:c6:11:b6:5d:f3:50:6e:03:
                    60:94:67:d9:f0:d4:f2:d6:a5:5a:77:e5:dd:b5:62:
                    24:68:cd:b9:43:ac:5a:c3:0a:a9:e1:02:04:c5:71:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:27:01:FA:6F:F2:A2:F1:B9:9C:6A:99:20:02:31:6B:F6:1D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a032::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:e2:51:01:d0:8f:35:30:6f:61:7d:ca:4d:e8:80:ad:36:
         be:83:dd:94:3e:4a:4e:2a:02:54:5e:ac:2f:5b:d0:24:c4:ca:
         6a:41:df:00:04:4e:50:1c:47:0d:bd:00:30:30:29:9a:e1:2b:
         23:4c:a8:ae:95:24:1e:6a:4c:70:74:62:02:47:28:24:fb:1f:
         df:cb:ba:b4:b2:06:82:44:42:22:8a:08:09:f2:b0:45:42:42:
         e8:ff:cf:4e:af:3b:67:f0:6e:da:9c:06:6e:dc:9f:f5:1b:45:
         ce:f2:e7:2f:00:27:56:35:1d:64:42:d9:c2:65:02:ea:85:2a:
         af:07:a8:57:2d:c2:46:ca:3b:e3:b3:1c:15:2d:3a:10:a8:88:
         ea:c8:b1:45:64:20:4d:42:f4:68:85:cb:13:fa:31:5b:86:13:
         a5:ae:ed:df:c0:1e:19:9b:85:46:74:04:41:90:a6:25:7d:1a:
         38:5d:67:53:1e:8d:84:5a:ba:74:4e:42:96:eb:93:d4:59:26:
         80:8a:48:76:d0:da:22:3e:25:e6:27:c8:08:13:5a:a9:be:f1:
         55:e3:06:c7:f9:c4:7a:85:00:9a:96:e6:f6:09:3c:85:de:ea:
         15:8f:3e:a4:3a:0a:3d:a7:b0:45:a0:c6:11:ce:ab:9e:0b:6d:
         0f:d8:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:25 2025 by rpki-client