Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27a2e1b0-81e8-3259-a027-08b9f766accc.roa
File:                     27a2e1b0-81e8-3259-a027-08b9f766accc.roa (raw, json)
Hash identifier:          WRMdQQU2QpHwM7psaWOgR7FwOOtd/lbDuO2GEqs14Wc=
Subject key identifier:   DA:5D:C9:BC:51:CB:CD:29:57:58:CB:54:8E:5B:DD:C5:98:65:04:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B41E723337C4B6348E4D2DC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27a2e1b0-81e8-3259-a027-08b9f766accc.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1005:a028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:23:33:7c:4b:63:48:e4:d2:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=16a0aa38-8e4d-4c1f-9414-cf182902e36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:75:e9:3c:15:eb:82:f1:67:0e:c1:2f:0f:
                    27:f6:28:b9:1e:6d:ee:49:d3:cf:c4:b9:80:47:de:
                    32:4c:b5:35:ee:05:77:5f:08:17:99:78:60:9a:8c:
                    4d:d2:13:57:bb:23:9f:8e:b1:33:1b:44:92:2d:3a:
                    11:25:2f:36:1a:68:fc:b5:ef:9c:16:b3:79:c8:5c:
                    66:ab:74:a1:a9:c7:8b:2f:28:7b:bd:0c:aa:05:b3:
                    31:be:d8:90:4d:c2:77:46:e3:a7:0c:97:e2:a8:07:
                    3f:12:12:57:e7:5b:11:62:cd:4e:32:a8:3d:e7:e3:
                    db:d2:7b:fb:ee:93:ab:9c:19:b3:79:11:e3:ba:78:
                    57:a9:4a:0c:30:a9:ee:7c:c4:ee:a3:15:28:19:a6:
                    e6:b8:a2:20:81:5e:95:1a:a6:73:c5:04:f4:ca:aa:
                    9b:dc:97:a7:23:5f:1d:22:be:b7:5d:79:21:79:92:
                    39:14:c9:34:09:c1:71:85:ce:a4:6a:88:86:50:69:
                    e6:b6:0c:2e:5f:27:8d:2e:cc:b4:d6:ff:12:08:65:
                    44:71:fb:b3:89:2c:ed:2b:47:f4:ae:61:d5:72:48:
                    e7:f2:9d:a9:12:72:df:97:59:90:55:09:aa:4e:b9:
                    9f:ae:40:20:f7:1b:58:44:8a:ec:cb:12:30:94:a2:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:C9:BC:51:CB:CD:29:57:58:CB:54:8E:5B:DD:C5:98:65:04:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27a2e1b0-81e8-3259-a027-08b9f766accc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9d:7d:c9:24:42:db:07:5d:30:f6:3a:39:86:b1:83:a1:de:
         8b:9b:fb:96:98:f2:29:c7:f0:e2:67:f2:7b:7c:6f:78:42:68:
         82:4f:8e:80:93:ec:df:f7:29:cd:fd:56:a4:71:cd:e8:3a:91:
         85:14:4f:9b:b8:61:ce:2d:27:49:76:6f:3c:cf:bf:24:fe:8b:
         a1:60:ad:97:15:7e:d9:68:19:97:30:99:70:dc:f3:47:2c:d9:
         b9:7c:ce:48:35:79:15:7f:05:39:7b:17:ec:6b:1c:4f:99:e7:
         f2:c3:66:ea:a4:1a:98:6f:89:d9:00:c9:53:7f:33:8e:7e:0f:
         a6:86:14:8a:23:3b:26:46:8b:21:8f:f4:e4:07:87:78:bb:da:
         2f:b2:8b:ea:94:fb:02:3a:52:9b:18:d9:f0:c8:f9:a3:2b:59:
         81:d6:0c:41:75:72:06:8c:f2:0f:43:e9:2c:f6:b1:eb:0a:14:
         46:1c:d7:a1:9f:97:1f:df:4c:a9:00:a0:49:cf:9b:69:e5:ad:
         2c:4d:03:c1:0b:38:52:d1:a9:af:7d:19:99:3c:42:14:62:88:
         fc:33:de:76:e2:b2:cc:fc:a8:9c:8f:c9:3d:d3:97:11:be:34:
         10:1c:09:2b:34:b5:1f:5b:87:ce:84:1a:ee:42:27:78:7d:92:
         55:78:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:31 2025 by rpki-client