Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
File:                     40d97b3c-f694-318a-8402-3f17bc873953.roa (raw, json)
Hash identifier:          ylXxTy7KUXOngY57It8BHZdsdI6q3mdRO+yqyAhhi1w=
Subject key identifier:   69:41:16:BB:69:E9:C7:9E:6B:87:92:18:46:E1:56:4E:32:9C:23:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117571E5AB92F97F872D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:75:71:e5:ab:92:f9:7f:87:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=540efb6e-cd2e-4ed6-9869-0b7aacdf925c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:7b:b3:5e:8c:98:fd:54:bd:24:20:d3:3e:
                    65:90:bf:01:28:48:19:5f:d5:e3:98:86:2e:7c:80:
                    50:34:99:89:bf:dd:a6:c7:f7:0f:3e:32:f3:10:c8:
                    2e:1f:df:b6:c6:0c:01:cd:ce:3c:5e:d7:84:0f:93:
                    42:c5:47:f0:16:ef:47:73:ee:18:2d:8f:6c:a7:ae:
                    10:10:7d:a6:ce:9d:98:f2:36:b1:b5:a3:89:0a:d9:
                    0b:37:90:2b:e0:71:79:07:66:6a:ad:54:db:7d:7d:
                    20:38:54:7f:e5:90:09:76:5b:00:b4:41:dd:71:e7:
                    17:8d:b3:b5:52:02:b1:ed:f9:ec:cd:7e:f5:86:63:
                    ba:c7:4b:ee:4c:98:c1:09:52:b7:70:b2:b5:31:7e:
                    51:5c:94:39:16:b1:bd:dc:1b:b8:13:d7:14:c5:26:
                    c9:a4:54:f4:0d:50:f0:ce:a9:58:73:09:2d:d1:8d:
                    6b:ad:7e:a7:d1:65:f2:9f:c0:02:52:04:12:0f:b1:
                    e8:33:79:be:e4:36:8a:43:ad:48:e8:d5:7f:c9:41:
                    05:47:d9:e6:28:4c:06:be:6f:5c:a3:c1:d9:c4:4e:
                    7f:e2:3c:42:eb:3e:82:c3:92:9d:53:af:4b:af:99:
                    2f:45:d2:f7:99:24:31:0b:93:fc:9f:fb:4c:5d:73:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:41:16:BB:69:E9:C7:9E:6B:87:92:18:46:E1:56:4E:32:9C:23:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:bb:9f:09:ac:f1:37:9b:ea:70:2c:05:6e:72:4b:bd:4e:
         f5:65:4c:0d:0d:ee:2c:11:ff:c7:f0:b7:9b:10:6a:b6:23:d2:
         2c:2e:c5:71:7d:08:9f:2a:65:8e:41:28:e5:f4:a5:90:52:ed:
         e5:c6:b5:47:59:d1:71:bc:93:d2:6f:b3:5f:65:65:db:a5:2a:
         07:d4:c5:15:fe:ee:c2:9c:1e:81:e7:72:ae:d4:21:56:4e:a8:
         17:57:50:0c:81:64:9f:d7:f8:8e:ea:59:9b:24:aa:f8:ce:80:
         be:b7:b7:01:34:54:a7:47:95:0a:63:53:19:45:16:61:d5:0c:
         9a:b6:a4:2a:fe:22:27:a7:2e:a8:41:0c:0c:81:73:dc:9e:0a:
         53:be:cf:7d:c6:f8:4e:96:03:8d:43:3a:a7:72:2a:7c:ab:9e:
         22:52:c8:83:56:ef:aa:6e:91:e7:47:a0:de:88:c1:82:59:7c:
         54:21:ab:e7:7b:5c:27:6c:c0:d8:e0:06:8c:b0:54:70:10:eb:
         77:9b:11:65:0c:51:09:ef:93:22:d9:16:ee:71:eb:00:7d:fb:
         0c:33:75:0b:74:81:02:b8:e4:66:78:84:64:7b:08:25:58:c2:
         6d:81:56:7d:52:33:3c:be:33:12:d1:85:4c:52:a2:cd:3e:56:
         42:c5:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:46 2025 by rpki-client