Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa
File:                     2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa (raw, json)
Hash identifier:          Gl2ajlb77kPiAyoBHwiRFQpr3R3yO5o4/aCi6qjnMbE=
Subject key identifier:   76:81:1F:F5:81:B7:11:52:1D:9D:2B:E3:37:31:D9:0E:4A:E8:3C:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6E91FDF04785F6FB5567C400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1012:a024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fd:f0:47:85:f6:fb:55:67:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=dfa1d9f6-abf1-4b5b-8ed5-3b69427eebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:fc:02:2c:ea:4d:00:6e:f9:6c:2c:9b:ec:
                    c5:ec:3e:7c:12:5a:62:d1:52:b8:8e:b1:1f:62:b3:
                    a0:c6:8a:4e:23:69:78:53:53:8b:6a:22:8a:f1:8d:
                    ca:14:a1:7a:18:a9:95:8d:7b:ea:dc:75:60:5d:4a:
                    a8:8d:29:dd:d6:6c:e6:b5:be:bb:8a:0b:50:58:63:
                    d6:00:52:5a:56:e3:1c:5f:76:e2:cc:b5:33:84:58:
                    13:20:b0:54:f9:a0:2e:25:23:51:ea:2e:d3:6c:14:
                    cd:da:e6:ce:4d:88:54:c6:87:42:58:5f:49:c1:c6:
                    83:8b:c2:db:02:04:21:9f:61:ca:15:f7:e8:95:6f:
                    80:0a:72:31:fc:3f:be:b6:55:4f:04:a1:cd:58:06:
                    ad:73:28:22:84:6a:5b:66:e3:f4:f8:68:11:44:ca:
                    3c:7d:f1:41:d6:d5:ae:33:9a:c9:36:e0:14:45:29:
                    79:5f:c2:3c:d6:8b:97:c1:63:49:89:89:26:4a:d3:
                    37:05:2f:f6:e5:00:a0:25:cb:2b:9b:3a:7f:6b:de:
                    66:a1:38:d6:b9:65:e3:7b:72:1c:40:19:24:00:ce:
                    bc:19:11:87:e0:24:1f:c5:f3:d2:da:a0:dd:0d:29:
                    6e:0f:de:08:df:fc:54:25:29:f4:84:37:a0:b9:d6:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:1F:F5:81:B7:11:52:1D:9D:2B:E3:37:31:D9:0E:4A:E8:3C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed08d05-ef26-3a96-b6d7-e75b312a21c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:89:ed:ef:9c:73:d7:0e:77:ca:d0:63:97:db:81:b1:65:73:
         38:84:d8:88:5d:6d:4d:64:e7:69:52:12:ca:4e:7f:92:87:87:
         d2:a4:f6:c9:4e:6c:6a:07:ad:55:48:56:fa:de:d8:a2:e3:22:
         0b:e6:02:ca:63:d7:e0:88:95:61:87:b8:8f:a8:6b:56:5e:ac:
         95:5d:38:ce:a6:63:92:43:b6:bd:55:99:55:51:c7:2c:0c:5f:
         a0:da:14:bd:bc:ac:10:ed:68:c8:d8:cf:be:ee:fe:9b:3e:e9:
         ea:56:e4:94:97:10:c7:7b:79:c1:06:a3:45:ba:0a:1f:80:86:
         b7:6e:19:9f:98:0c:38:7a:aa:70:0e:d0:96:a6:41:b3:ce:99:
         d4:96:fc:b4:dc:49:f8:e6:20:43:8e:1f:ff:73:a9:b3:73:3e:
         bb:03:65:cf:1b:e4:de:18:e8:c9:57:6c:b6:76:7d:b6:72:9b:
         d4:6b:fb:c4:01:db:6b:eb:65:9d:2a:b6:80:15:e4:a2:81:4b:
         f4:96:14:b3:7b:e4:63:6f:a9:f3:38:1e:fc:c1:06:59:3f:93:
         bb:09:cc:58:ef:a1:48:0c:e3:2e:87:92:8e:b0:a2:48:64:0f:
         e1:39:04:8a:cc:92:41:18:15:7e:3f:94:2b:a4:31:2e:a6:dd:
         56:79:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:07 2025 by rpki-client