Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa
File:                     4c9c20f7-ef07-358a-be86-9c789c650ee4.roa (raw, json)
Hash identifier:          2h7YJZgo0XR5U3S4mOZSRIZzA3GL8qlGLLL9GmyfGqU=
Subject key identifier:   94:7F:29:2C:69:A2:BF:5C:91:0C:10:BD:8A:99:3E:A2:75:11:F8:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C79DC0A97835EDCE83380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:bf0a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:79:dc:0a:97:83:5e:dc:e8:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=c3e0c759-1c00-4d54-8957-c3d6b2e1f1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:a2:19:96:4c:28:75:7a:4a:51:33:6c:3d:
                    73:d9:dc:d0:86:90:7a:43:0d:80:83:a6:b4:44:47:
                    3a:96:61:af:a3:3b:32:64:f0:1a:29:db:53:f9:c9:
                    05:e6:25:4d:05:26:e2:34:f6:ae:c1:50:86:48:b3:
                    7f:f5:af:5e:7a:55:8c:05:61:e1:28:1a:72:94:72:
                    cb:42:bb:9c:50:23:de:40:b7:e7:b7:a9:b8:1f:1c:
                    5b:f2:06:58:25:34:f6:75:b1:12:d5:63:0e:f9:03:
                    6c:ed:64:bb:da:10:a1:7a:9e:4d:8a:aa:b9:11:99:
                    d2:e9:91:99:22:38:c2:07:6c:02:ba:a1:90:64:04:
                    14:ad:f4:10:ea:86:11:98:11:eb:00:a1:1a:85:3c:
                    6b:96:79:56:13:94:60:66:23:f5:2f:ee:5c:a2:ff:
                    a7:dc:d5:e7:f1:b0:df:ed:8c:1b:db:b2:36:77:50:
                    c5:33:02:05:dd:12:23:9f:67:0d:4a:eb:bf:d5:86:
                    13:ec:f9:cc:f4:4d:ae:d3:08:fc:e8:b9:b0:a9:b5:
                    21:9b:e5:91:b3:89:6e:4b:d9:0e:23:cf:b8:e0:93:
                    6f:7c:71:6b:3c:bb:4a:34:2f:58:0a:97:3b:1d:a4:
                    00:7f:8d:df:f3:7a:b5:e1:de:70:22:1e:8a:66:e9:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7F:29:2C:69:A2:BF:5C:91:0C:10:BD:8A:99:3E:A2:75:11:F8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf0a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:08:0e:fd:25:67:95:64:bc:99:8c:1a:f5:ae:6b:7e:5a:27:
         cb:59:f7:29:b7:ba:81:ec:73:b9:7a:0e:74:1c:fb:07:30:e0:
         ac:cb:71:69:a9:70:d9:a5:3e:d3:ce:24:2c:44:4f:b7:9a:de:
         08:23:0f:bc:c7:7e:8e:68:c1:22:69:a3:4d:d8:c3:ff:b4:d5:
         29:8b:80:b2:37:36:17:0e:7b:fb:1f:43:a4:0a:9d:eb:ae:54:
         12:8e:87:6d:23:f0:fc:31:55:fb:2e:66:6b:eb:0f:52:34:ca:
         3a:48:8e:4a:7e:78:da:30:c7:b0:d7:17:29:37:ce:29:b3:58:
         dd:93:1d:a7:1a:44:f7:0c:7c:ca:0a:39:e7:1b:2b:d1:c0:c5:
         c5:a4:4e:f1:85:5f:92:50:8e:7c:ac:19:30:50:34:21:28:9c:
         11:98:63:64:d1:88:cc:c9:df:b6:ab:47:c7:67:97:26:08:2b:
         b5:1f:9f:05:ca:42:7b:2e:ad:a9:02:e7:0a:dc:ac:9f:41:59:
         fe:4b:ea:f4:af:10:cf:d2:7c:33:65:46:b9:cd:84:7a:30:ab:
         20:28:1e:8a:fd:d9:8d:71:2d:14:ea:48:fa:dc:b8:91:82:36:
         23:c3:53:9d:95:cc:45:18:41:9a:16:3d:01:7c:e8:f8:c6:d4:
         29:c8:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:38 2025 by rpki-client