Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa
File:                     4882d797-1aa7-36ae-90f1-55a5674ce96b.roa (raw, json)
Hash identifier:          mjN8Yc5zwRT8V7LyCFrBstmNCKFGnlkeHKytVr3hW20=
Subject key identifier:   37:70:6E:68:0F:81:9D:AD:40:DC:2D:54:47:F4:1E:EE:54:48:E4:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370D207E557A7F0F9DF500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        2600:4040:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0d:20:7e:55:7a:7f:0f:9d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=bf8d5fb2-81f9-464d-955c-a1bdaa56e635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ac:01:ff:b7:db:52:f1:3a:0e:1a:b1:a6:2c:
                    00:4f:34:b8:e9:44:a2:81:66:39:e8:11:74:e1:1f:
                    63:64:d0:03:63:0d:ae:fb:16:f0:c5:c5:45:55:82:
                    de:bc:87:b7:fc:7c:6b:b3:28:a9:c0:2b:e6:58:7f:
                    16:3e:29:25:55:55:f5:08:56:69:d0:b3:96:79:b5:
                    6d:87:aa:5d:7a:cb:92:1e:96:a0:bb:27:ba:3f:bc:
                    cc:92:76:fa:16:c8:46:ff:ca:f7:e4:72:ec:b8:9f:
                    e3:cc:e9:67:c9:d0:f7:8e:aa:17:05:e3:26:86:5b:
                    c2:61:db:93:55:15:c3:d0:f6:57:31:86:64:a3:07:
                    14:42:c4:5a:2f:e2:52:72:d5:e3:a9:27:eb:ae:82:
                    ed:34:35:73:5d:87:81:d4:ef:e1:a6:8e:48:b9:96:
                    28:dc:12:b0:72:66:d3:cf:bf:94:47:c9:a1:0c:78:
                    23:6b:dd:31:22:be:87:8a:d4:22:d3:73:65:14:20:
                    20:35:9a:a8:b0:47:67:39:05:4e:cf:7a:a2:1c:c1:
                    39:eb:fb:82:14:90:3f:4e:c3:04:7c:92:66:d0:f9:
                    45:80:f1:0e:b8:29:8d:8d:19:ad:77:6a:76:dd:04:
                    3f:46:72:8d:5a:6f:4e:52:5a:5d:8a:f1:b3:3f:71:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:6E:68:0F:81:9D:AD:40:DC:2D:54:47:F4:1E:EE:54:48:E4:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:88:81:0d:8d:d4:51:47:30:bb:62:51:6e:30:b4:0e:75:
         4f:6c:09:6d:3b:1a:fd:87:e9:9c:64:0c:49:6e:c3:63:8c:8c:
         a8:aa:a5:15:36:0d:0c:0b:fb:6b:4a:b7:15:2b:ef:4f:26:6d:
         c4:71:4b:27:e5:dc:7c:36:36:36:55:b0:81:d2:df:e4:9b:e2:
         de:7b:3f:fc:2f:d6:0f:40:e6:1c:b5:6e:80:bb:3d:be:67:32:
         63:3b:e3:6d:dd:05:c5:47:96:ce:a7:57:f2:34:eb:70:80:01:
         32:14:da:18:47:1f:7b:b2:22:73:55:e0:5c:3f:6c:38:3a:9d:
         99:27:70:3f:e4:f3:03:03:89:01:02:fc:d8:a0:48:e4:f6:9f:
         80:13:fb:8c:1b:aa:e5:90:3f:34:7d:b8:cf:e9:cb:3d:e4:5c:
         92:c9:36:c6:28:35:8a:12:3c:30:0f:64:ae:9a:ba:83:c9:7c:
         70:d1:8b:db:02:a3:07:92:42:2f:8f:59:1e:e4:5c:18:1c:7a:
         fe:66:0a:cc:31:77:47:7d:3c:ab:b5:c5:05:46:85:68:ab:ae:
         d4:6c:61:93:ba:7f:4d:dc:e4:0c:bc:8d:64:99:b0:96:47:e9:
         04:c1:d2:2e:2c:45:5f:0b:92:26:51:74:b7:47:3f:31:05:44:
         4a:11:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:50 2025 by rpki-client