Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1715cbbd-165c-34ae-bab4-b93ae5d6ce0a.roa
File:                     1715cbbd-165c-34ae-bab4-b93ae5d6ce0a.roa (raw, json)
Hash identifier:          mIe9S8sTOWp/1FNijV4gB+R0hteOVHeHAh0d5sss4xo=
Subject key identifier:   16:DE:15:93:0B:A4:5B:C4:E7:CC:D8:D5:5E:A0:B9:93:CC:3C:CE:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2CF71C4E994873B483159C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1715cbbd-165c-34ae-bab4-b93ae5d6ce0a.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b200::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:1c:4e:99:48:73:b4:83:15:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=becba201-e792-439a-a13a-812ce24643b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:ce:25:14:b5:ac:64:38:53:dd:85:5d:15:
                    93:8c:22:e9:77:70:4c:af:9f:92:42:26:7d:51:48:
                    90:f4:44:ec:84:e0:b1:12:25:5e:a7:05:62:66:02:
                    c9:b8:85:37:ad:c6:fe:93:4b:98:6b:81:68:41:34:
                    d3:ce:1f:49:55:18:7e:65:b8:7e:a2:e8:b3:a2:3b:
                    c8:4a:5a:27:dc:af:b7:5e:07:63:29:05:82:46:b2:
                    42:26:f0:c5:89:eb:c9:28:1a:4a:ca:f9:f5:51:1f:
                    aa:4b:94:b3:76:3d:2f:0b:70:bb:4b:80:b4:da:90:
                    c8:f3:e1:87:bd:b8:f3:c8:f0:f4:81:36:36:f2:2b:
                    49:da:a2:c1:74:26:2c:b0:c1:0e:70:b3:02:5a:c3:
                    6d:53:15:06:b6:c0:d2:9d:a3:7c:08:23:91:7f:0a:
                    03:a5:47:0a:fc:0c:cf:c3:bd:c2:d3:0e:4b:d6:4a:
                    9c:b1:0c:85:39:73:86:23:3e:bb:93:a7:52:dd:97:
                    3b:3a:63:60:aa:b8:a5:e7:26:f7:fa:d4:97:be:68:
                    f2:bf:16:f3:57:30:13:89:8c:5c:9d:5c:c2:3e:1d:
                    61:23:3e:5f:d9:b1:5c:c4:f9:dc:04:17:24:30:97:
                    a7:ea:7b:96:5e:66:d6:5c:63:49:7b:a8:66:af:ca:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:15:93:0B:A4:5B:C4:E7:CC:D8:D5:5E:A0:B9:93:CC:3C:CE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1715cbbd-165c-34ae-bab4-b93ae5d6ce0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b200::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:84:fd:86:ef:0b:08:c6:bc:40:ba:5d:61:00:d5:d9:15:ad:
         fe:f6:1e:a9:bf:78:39:b7:f9:1d:dc:86:16:c7:e6:04:b3:fe:
         71:79:81:a7:e3:a4:1d:0b:fb:c8:1b:58:fe:5c:8e:14:ea:62:
         cf:cc:04:8d:3b:ec:65:63:0c:1b:0a:42:91:8d:9c:a8:67:8a:
         71:82:93:4b:57:f4:b9:6d:e5:3c:4a:38:c1:2c:9f:c9:2d:dd:
         1f:a7:a3:bc:87:47:08:ef:65:2b:46:76:10:ab:7d:42:26:52:
         a2:48:d4:dc:a4:ef:fb:40:e2:0b:cb:9e:9e:59:f3:ed:47:e6:
         62:fa:45:69:b8:c4:24:36:de:a6:32:df:55:f0:27:c0:fb:42:
         b9:7e:81:61:ee:f7:f2:8c:3d:25:20:b1:ef:df:26:92:a6:ce:
         f3:d1:0a:af:1c:25:66:57:43:c3:5c:49:cc:cd:6f:e7:29:20:
         45:2a:59:52:04:af:90:2b:43:5d:06:24:bb:2a:d1:73:50:f2:
         77:12:8d:da:a1:34:b8:29:49:55:be:90:44:e1:25:88:a2:f9:
         52:2d:9c:51:43:3f:1c:b8:e5:45:b7:eb:79:62:05:76:34:5d:
         7a:22:13:5a:88:91:4d:55:b5:7a:8d:50:78:78:1a:e6:47:9d:
         26:f2:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:10 2025 by rpki-client