Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd0609-0ed0-343c-bd2e-3496b8e143c9.roa
File:                     36fd0609-0ed0-343c-bd2e-3496b8e143c9.roa (raw, json)
Hash identifier:          fG0YoJAC0Xxetvc6OJWDkC6mnswZ1BiaFLcR76nT694=
Subject key identifier:   F2:81:31:3B:4F:F4:1B:62:1D:7C:4F:8D:5F:F8:5C:72:15:92:B7:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3720659872F9A085D0CCE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd0609-0ed0-343c-bd2e-3496b8e143c9.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b0f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:20:65:98:72:f9:a0:85:d0:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=4e0ed3f6-9577-45f9-9767-e2742fa29290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:b8:35:d4:9f:40:48:80:55:98:d5:a8:c5:
                    a0:10:d3:90:fb:b4:d1:d2:2a:e6:0d:55:98:da:10:
                    78:e1:c9:0b:52:95:a4:40:ff:f3:bf:46:71:7f:48:
                    37:3b:55:26:7a:d1:f0:3e:bc:c9:2c:97:44:c9:5e:
                    64:bf:5f:61:a8:ea:bb:02:48:b6:32:84:bc:76:04:
                    18:f7:53:51:99:8d:43:f6:32:0e:76:01:fe:f1:b3:
                    f9:b7:49:49:5c:a5:9e:44:c1:1c:64:4c:10:c3:86:
                    5f:8f:d1:24:c6:fc:8a:00:44:11:25:0a:1a:bd:f3:
                    77:81:a2:c5:24:f1:54:c3:72:24:52:aa:f9:a2:d2:
                    84:d2:84:11:4f:1d:8d:85:7a:11:5b:ef:d1:be:eb:
                    d5:8f:fb:55:d7:a8:69:d6:10:78:b5:da:a1:b7:62:
                    48:e4:57:18:c2:b3:14:7e:72:1a:d7:18:42:83:27:
                    52:48:dd:b5:ad:9f:12:c7:84:4d:8f:a5:22:b4:1e:
                    82:5a:72:46:14:db:6c:98:77:92:ad:ae:77:fe:d2:
                    14:e0:87:9a:50:29:f6:54:8b:12:b1:35:95:f8:62:
                    9c:aa:4b:a1:f2:be:6f:62:47:95:dd:a0:a4:a4:b3:
                    10:2f:00:95:59:e8:b0:0c:bf:32:13:1c:dc:b1:38:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:31:3B:4F:F4:1B:62:1D:7C:4F:8D:5F:F8:5C:72:15:92:B7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd0609-0ed0-343c-bd2e-3496b8e143c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b0f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:87:17:55:c3:73:19:12:ee:c6:fd:44:bf:2d:ee:59:4a:
         99:73:b8:ea:40:25:d5:de:ad:1f:6e:b1:11:f1:ca:4a:93:a0:
         e9:17:2c:b7:97:3e:25:63:3d:77:f2:08:8e:ad:c2:70:54:7b:
         95:c4:aa:74:59:be:9b:51:ea:8b:b1:a6:69:bc:1f:23:8d:c1:
         98:4f:6a:4e:9d:6d:a9:61:f6:88:f6:42:51:39:a1:67:b4:58:
         23:2d:49:c5:d5:9d:a6:f6:52:9e:f3:cd:89:c9:a3:2d:42:ac:
         ef:80:ae:84:ed:c0:87:f2:78:a8:8a:a5:71:4b:a3:48:9c:aa:
         df:f8:46:fc:29:83:c5:a7:bf:9e:f8:07:13:a5:30:72:0e:3d:
         4b:b8:51:65:d8:a6:f9:a2:a2:bd:3b:f1:31:b5:23:8e:1f:07:
         58:ec:74:0d:fe:2d:78:59:fe:e6:9f:87:6b:bf:81:c5:bc:52:
         0a:b7:df:29:0e:68:42:40:ec:fc:6d:ae:1f:ef:a3:8d:3b:9b:
         c6:b6:ae:b0:7c:8e:9f:ef:b9:dc:41:da:1f:09:e7:51:f5:41:
         fe:e7:fa:53:42:77:ee:61:2d:88:e3:a8:59:c7:76:19:00:12:
         d8:04:26:5a:d0:bf:0f:b8:ff:f9:98:73:aa:7f:98:29:43:40:
         d5:ec:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:23 2025 by rpki-client