Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0fd239-d5fd-3761-b37b-8fe28dbe3bb9.roa
File:                     2e0fd239-d5fd-3761-b37b-8fe28dbe3bb9.roa (raw, json)
Hash identifier:          jOAmQE9ZjYPXu1eCqKsi9yvKpM0NivE9xnvGp5jwo4U=
Subject key identifier:   01:20:58:4F:CE:99:DE:93:77:1A:71:68:48:7A:87:11:00:86:46:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8CD956951B6EFE6815B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0fd239-d5fd-3761-b37b-8fe28dbe3bb9.roa
Signing time:             Wed 01 Oct 2025 14:11:15 +0000
ROA not before:           Wed 01 Oct 2025 14:11:15 +0000
ROA not after:            Tue 30 Dec 2025 15:11:15 +0000
asID:                     6167
IP address blocks:        2600:1001:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8c:d9:56:95:1b:6e:fe:68:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:15 2025 GMT
            Not After : Dec 30 15:11:15 2025 GMT
        Subject: CN=0e1a58f5-5839-4362-a943-6d859ed9348e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:90:1b:43:cf:e1:b5:b4:ae:6c:de:25:a4:
                    be:40:fe:92:f6:c4:78:49:8f:49:43:19:b9:5a:37:
                    63:a9:b5:a5:85:5f:c6:f4:2e:cd:7a:b2:ff:ff:7b:
                    b5:ed:3f:1d:25:0b:13:66:e4:ac:21:8b:f8:fc:14:
                    06:3d:77:15:ab:4d:88:f6:90:31:45:fb:be:66:63:
                    6b:23:a1:98:0d:09:48:f0:ec:69:4e:4c:82:e3:23:
                    f6:a6:b6:52:3e:25:e8:02:6f:fb:0e:7b:22:99:f8:
                    a2:78:47:ba:11:da:f6:ea:2d:c2:71:f4:bd:7a:1a:
                    c7:59:57:cb:8c:1b:df:bd:95:6b:8c:b3:27:e1:e9:
                    b6:fd:39:76:3e:af:cc:ed:dc:b5:b4:76:61:eb:35:
                    56:37:e6:cc:8e:1b:ce:50:60:82:b2:19:13:7d:1a:
                    3e:8f:55:87:be:9f:b6:70:0a:b0:38:74:1e:07:01:
                    be:39:49:a6:0a:61:10:97:c6:b9:31:31:ac:91:55:
                    af:58:e3:06:1e:17:ef:0f:95:07:58:b8:0c:30:b0:
                    72:9a:d7:92:a4:82:01:b4:aa:81:08:b2:fd:7f:8d:
                    e0:2a:de:7c:3d:ad:da:ff:0a:75:3a:40:e0:df:e6:
                    8d:98:1a:01:b3:69:91:05:d6:38:52:c8:fa:1e:56:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:58:4F:CE:99:DE:93:77:1A:71:68:48:7A:87:11:00:86:46:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0fd239-d5fd-3761-b37b-8fe28dbe3bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:50:86:74:d7:a6:e8:ea:e7:96:ab:fe:6f:99:b7:8d:fc:b3:
         60:45:b1:59:b8:19:e9:5a:ed:c7:9e:cb:98:1e:f9:6b:87:6f:
         7c:eb:8a:32:d8:d6:28:63:b3:14:90:df:0e:75:79:b8:17:99:
         08:76:67:08:16:da:35:45:54:62:15:5b:4b:9f:ff:9c:87:6c:
         f4:63:82:28:88:9a:57:bd:b5:fc:1a:56:55:55:95:f8:d9:59:
         40:1f:9e:04:20:67:9d:0b:8a:ce:c1:79:01:fa:2e:a9:a0:e3:
         4f:d9:b8:c4:3e:e4:6a:c9:7a:54:71:67:43:74:77:6c:dc:5d:
         f8:d5:ca:3f:d1:28:36:e9:66:f9:de:55:64:d4:b1:13:a1:66:
         94:df:ed:ce:33:3f:d8:56:8b:91:e1:aa:c6:93:62:da:c0:2b:
         c6:fa:2a:dd:5a:9b:03:1d:ba:49:98:e6:74:b9:71:36:47:ea:
         5f:e8:53:c0:61:22:40:87:2c:de:3d:f8:96:c1:ac:86:ba:0f:
         d6:e2:22:d0:9f:17:64:29:60:b0:38:c4:22:56:d5:13:f3:c9:
         97:22:72:dd:dd:f6:6f:d4:ea:2b:7c:22:2c:aa:03:95:8e:7c:
         07:21:bc:d5:7d:0f:88:92:8c:c7:20:8e:81:ac:d9:06:45:1b:
         6d:aa:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:27 2025 by rpki-client