Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31626753-1185-3e0a-aed9-f4d93a742ad6.roa
File:                     31626753-1185-3e0a-aed9-f4d93a742ad6.roa (raw, json)
Hash identifier:          XXfMRL65hIsh8XR5Dp9mUMxETAcu5rgsIDfTGdBf2Wc=
Subject key identifier:   92:00:20:3A:45:7E:91:DC:8C:7A:F6:A6:61:ED:0C:95:83:7F:3E:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F32ADF0C8BF297FC43C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31626753-1185-3e0a-aed9-f4d93a742ad6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1007:b090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f3:2a:df:0c:8b:f2:97:fc:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=a32beb65-ec32-40d2-85b8-fb119eac8e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:71:68:9f:55:b7:63:b6:c3:be:7e:52:12:
                    00:ff:24:72:fd:19:35:ed:32:9d:e0:67:c3:82:7c:
                    f7:b8:70:af:a4:16:cf:8b:9a:9f:ad:a6:a2:b2:db:
                    ce:57:93:94:d0:49:1f:98:66:37:fc:56:d4:e8:3e:
                    d5:9d:67:52:43:74:1a:ad:2c:70:9e:e2:37:13:ff:
                    19:e8:84:53:20:36:32:60:f6:59:a4:80:dc:32:b4:
                    27:0c:0d:ee:f8:0d:65:9e:09:c7:79:72:3d:d1:e4:
                    a7:2c:f4:0c:32:4b:4a:13:6d:61:96:d9:0e:27:05:
                    43:56:5b:f2:18:90:a4:e7:14:40:ec:4f:3f:82:e5:
                    b4:e4:d7:44:cf:a7:1e:39:93:03:f3:f6:89:d5:f2:
                    6b:33:32:0b:e2:78:29:37:6c:7c:e3:a5:da:72:74:
                    7b:7f:ed:75:cf:e0:2d:b0:a0:1b:66:e9:2a:89:1f:
                    e5:a2:cf:60:a9:05:db:77:c7:dc:30:b7:02:18:60:
                    3c:c0:b5:db:b2:36:fe:98:4d:8f:d6:80:e7:ec:f6:
                    43:e7:63:fc:67:22:ab:95:0b:cb:83:a9:b0:07:c3:
                    5e:91:8f:8c:fc:7f:30:ba:56:33:e0:c0:03:12:9d:
                    be:9e:90:fc:2d:6a:f1:b8:ca:b7:d0:88:96:a7:e7:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:20:3A:45:7E:91:DC:8C:7A:F6:A6:61:ED:0C:95:83:7F:3E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31626753-1185-3e0a-aed9-f4d93a742ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b090::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:a9:32:b0:67:ba:80:64:98:8b:70:ed:c9:33:c8:70:fc:
         4d:68:1a:74:02:30:11:e6:e7:46:36:57:0f:e8:ee:34:f8:b6:
         e8:cc:ab:21:70:01:35:86:1b:a8:e7:f3:66:5b:d5:48:01:52:
         3a:fe:34:95:84:f4:68:00:a4:25:a4:8c:01:8e:bd:a0:d6:52:
         9e:c5:d3:7f:4d:22:8e:09:ce:ba:5a:d7:dc:97:de:19:fd:3e:
         f0:aa:3d:8e:88:96:ea:c4:89:7a:72:f1:ee:92:9b:e5:3a:99:
         ca:51:ae:36:ee:8f:dc:d0:70:45:e8:d0:af:4a:dc:a2:a8:b7:
         ae:cd:d3:53:5a:fa:29:c0:cd:e4:aa:bb:c2:91:a8:e4:2c:28:
         d4:48:f6:b7:5d:7c:bf:b8:81:f7:6e:19:13:e8:28:9a:ec:57:
         9a:d9:3a:5d:79:13:44:57:0c:0c:db:1d:da:e2:6d:0e:36:57:
         14:a6:e9:9f:85:90:75:7d:8e:d2:00:2d:5e:85:f3:52:0f:97:
         93:b5:d8:80:c0:85:98:42:28:b2:09:c0:95:87:5b:d2:ca:ed:
         13:82:46:a6:f3:01:b3:1c:b9:7d:ad:c8:1d:38:3c:b8:5b:49:
         bc:f5:2e:e9:8a:6c:16:22:5f:23:07:65:bd:b8:a3:08:f3:76:
         0f:b4:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:35 2025 by rpki-client