Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/427c1e09-45a6-3b00-b753-4f902c263246.roa
File:                     427c1e09-45a6-3b00-b753-4f902c263246.roa (raw, json)
Hash identifier:          3HbmYELtZuky5ErEO0tpiW2Mx124QYXV6blCX9X6X3s=
Subject key identifier:   EF:E7:4C:E2:9B:66:25:6B:F4:DC:B4:65:3F:AE:F7:F9:D6:3B:55:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F362B6C0E2CB0B67DB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/427c1e09-45a6-3b00-b753-4f902c263246.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1007:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f3:62:b6:c0:e2:cb:0b:67:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=44157a19-ad9e-404e-82af-97f650eb8f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:c6:4e:27:a0:ef:a4:b5:96:25:2a:27:b8:
                    dc:b1:a0:af:48:19:b1:5c:36:7e:8e:5e:9e:f2:c3:
                    35:5c:40:47:64:2d:d2:9a:70:56:4c:fb:37:30:aa:
                    c9:d3:ac:9c:6b:ca:2b:28:7f:e7:f2:23:3f:d8:7c:
                    a0:ee:65:cb:86:6c:28:87:ec:74:ff:5c:cf:b3:30:
                    a5:ec:3a:39:c2:90:de:10:39:f5:7d:94:9a:5c:85:
                    30:80:36:c0:55:a9:03:f7:19:d2:3a:56:36:eb:c8:
                    e6:73:e8:53:a4:ed:73:ae:62:b2:3e:8d:5c:14:59:
                    6c:ed:1b:85:69:ea:c5:6e:f4:71:9c:b0:0b:66:34:
                    b3:77:3c:5a:96:8c:76:04:bc:c0:53:ab:7e:2b:2b:
                    ec:58:60:49:89:39:78:9e:59:f2:d0:94:f9:f7:41:
                    7b:92:03:b6:10:61:a5:13:27:cb:aa:9f:6e:bf:e3:
                    8b:a5:85:5c:5d:70:56:bd:87:18:fc:6b:cf:d4:43:
                    05:aa:cc:c0:b4:00:fb:31:7c:70:c6:02:67:18:7f:
                    e3:81:66:e6:de:5f:cc:b3:3e:c9:d8:a9:ac:bd:48:
                    94:48:00:13:36:04:cf:79:ba:60:83:af:c8:63:2f:
                    ea:34:22:06:b6:fa:6d:cb:a7:e7:44:03:79:eb:99:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:4C:E2:9B:66:25:6B:F4:DC:B4:65:3F:AE:F7:F9:D6:3B:55:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/427c1e09-45a6-3b00-b753-4f902c263246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:50:a1:4e:e3:5a:70:b4:d8:e4:5d:ef:f3:52:1f:69:4e:
         ce:6d:bb:96:0e:78:2b:3b:37:17:bb:1e:d0:84:73:3f:6d:1d:
         eb:7e:6d:d4:4d:fb:7b:73:3e:ff:92:84:91:86:18:d3:4e:5c:
         0e:fc:ed:e4:f3:b3:9c:1d:7f:8d:01:10:3d:3c:53:ca:84:d3:
         97:11:c3:03:b8:42:8d:0c:03:77:00:3e:9e:6f:6b:8f:75:48:
         c3:b5:d1:04:9f:dd:4d:25:19:c1:a1:72:77:15:f1:fc:4a:86:
         88:79:f3:d3:63:f2:f3:3e:2d:4c:30:a4:b3:e9:d9:6f:c9:28:
         2a:54:e2:4b:e5:8b:28:68:b2:2f:8c:34:cd:91:b9:d0:9f:ad:
         9b:a2:68:e8:b6:e1:d8:fa:0e:15:ee:16:56:6b:40:39:90:a1:
         ac:87:58:02:fa:7a:95:10:b3:78:b4:26:a0:50:77:c4:82:9a:
         85:a2:8b:2e:01:6e:e6:c5:a6:48:4a:0d:fd:7b:fc:ae:ea:07:
         09:70:2d:10:b7:92:a3:88:d3:2c:15:35:a7:41:66:03:35:5c:
         aa:2d:1d:1d:3e:7b:42:6a:4b:42:14:78:dc:06:5f:af:d0:eb:
         e6:04:4e:13:8f:2c:16:af:b4:1c:08:e7:2c:dc:1c:18:58:53:
         36:c3:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:25 2025 by rpki-client