Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa
File:                     1d613ff7-72af-39e9-af69-1539a839eed6.roa (raw, json)
Hash identifier:          DFHaOCzhDT1KlzldB+DaSQif9T8XZqUW+eQk7PuBkUM=
Subject key identifier:   85:25:67:7B:E4:9F:59:75:47:96:AF:82:D4:65:44:B3:D7:F7:99:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C84554193C7AB6AC77E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2600:1007::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:84:55:41:93:c7:ab:6a:c7:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=15875cd1-afa5-4a51-b4ab-220f2775759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:1e:ed:64:08:84:8c:61:a0:70:1f:12:b3:
                    e2:0f:63:58:1c:d4:c4:81:f1:2c:99:60:7f:22:14:
                    e1:4b:29:16:d1:f2:b9:10:92:7b:83:51:62:ef:17:
                    a4:89:2d:f0:58:5a:42:6e:6c:7b:c0:48:7a:0b:38:
                    bb:86:70:9f:f7:a9:73:30:68:14:a9:59:2b:e2:2b:
                    1f:37:69:bb:33:07:55:eb:07:61:f7:a1:45:62:32:
                    31:86:8f:60:84:d9:18:2d:37:e6:aa:ed:5a:33:85:
                    8f:34:78:ea:54:a0:82:1c:e4:32:20:79:d3:4a:db:
                    6c:cb:99:7e:ea:b8:fb:bb:fc:69:f5:98:f7:b0:3d:
                    d3:c1:10:dd:1d:aa:e3:e9:5a:cd:2f:7f:4a:75:b1:
                    59:86:d6:37:63:64:20:79:b6:37:49:f2:79:0d:e7:
                    37:e6:25:3c:b8:d6:f8:92:be:77:e8:c8:90:20:99:
                    55:a5:58:dc:3e:67:89:37:09:31:88:ac:20:ae:6e:
                    40:ae:c7:51:10:90:0e:83:8f:5a:c5:44:03:05:62:
                    44:53:9d:76:5c:d8:90:7f:f5:97:76:04:60:ae:46:
                    90:d3:80:e0:d8:41:25:40:99:45:04:4a:fa:9e:31:
                    9d:75:3d:29:0a:ad:97:49:de:d5:83:11:ce:77:95:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:25:67:7B:E4:9F:59:75:47:96:AF:82:D4:65:44:B3:D7:F7:99:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d613ff7-72af-39e9-af69-1539a839eed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:92:e1:05:20:cb:00:ba:63:69:7e:7d:c0:66:14:11:7f:
         75:96:97:e3:24:71:3c:ba:2c:44:d8:e9:01:be:74:05:07:5c:
         fb:cd:fc:8a:b9:e0:90:87:40:a2:ef:1e:3e:60:1f:42:9a:34:
         2e:b7:e0:e9:65:58:7c:35:f1:27:1d:d1:49:02:75:15:99:de:
         e7:ee:5c:f3:c5:f9:aa:78:2a:12:78:c6:a4:19:3b:a5:fb:bf:
         56:56:73:24:87:4b:03:76:be:e3:e2:56:40:78:95:2d:84:c1:
         e1:c6:28:25:95:60:a3:28:0b:92:d2:27:6d:68:33:ab:d5:8e:
         98:89:e8:aa:d3:ca:14:14:8d:c6:fb:43:d5:64:13:57:46:30:
         42:f4:3f:45:01:ea:68:ec:b2:02:03:d8:82:d7:f0:eb:fa:4d:
         2d:ff:0c:12:39:ca:62:8a:8a:fe:4a:80:f3:7e:85:bb:f8:a8:
         e7:af:e8:3c:95:c5:0b:6f:16:9e:9e:e4:a3:30:ad:67:61:46:
         d2:79:a3:e6:07:b2:88:cd:ee:21:17:6d:b5:43:8d:e6:e1:43:
         59:47:20:d9:82:87:af:54:91:dc:0e:bd:2b:f6:ee:e7:22:cc:
         6b:b9:ff:5d:55:44:66:18:b6:12:f1:51:8b:86:59:dc:d2:11:
         de:f5:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:08 2025 by rpki-client