Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa
File:                     4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa (raw, json)
Hash identifier:          2KVbx3RPet+EWQWNKXsibq5fDCbzvIfN87j0CaFoevY=
Subject key identifier:   32:61:E4:76:9B:3B:54:ED:54:C9:FA:DD:DF:4F:B1:68:F2:CE:10:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C94943FCDB24C671C8740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100b:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:94:94:3f:cd:b2:4c:67:1c:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1230c5ac-76ae-48de-9d49-f1ecd8c7ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:74:4c:4d:15:34:b0:67:d0:2c:51:4b:df:
                    2f:a1:f1:3c:33:75:86:4f:25:34:75:8f:80:73:ce:
                    f6:6b:78:4d:db:6b:ab:88:6c:f5:91:77:f1:5b:a4:
                    a0:39:bb:64:a4:b8:a1:ef:30:6c:9a:d7:6e:81:65:
                    6e:cd:98:42:01:bd:84:3b:e9:8c:45:e0:f3:03:16:
                    2c:f9:c5:68:21:9f:ad:b5:3e:c0:10:a3:cf:97:95:
                    bd:f3:d6:00:e1:cc:52:a2:0f:0f:10:db:51:1d:58:
                    e9:36:1a:57:ae:85:a9:27:8b:24:6b:43:41:bc:b5:
                    3b:d3:24:95:73:c1:a1:43:78:2f:66:13:07:5c:61:
                    71:e8:95:c2:15:24:8e:ce:8f:09:56:3f:1f:8b:66:
                    ba:af:5c:b2:e7:61:26:c8:a2:52:3c:36:67:7b:db:
                    70:36:fc:80:3b:8b:3a:90:34:37:84:42:15:c8:69:
                    26:bb:7c:ec:1c:8d:34:32:ab:dd:04:b4:9c:7f:da:
                    c1:30:fd:21:8a:ba:ec:4b:7e:f7:16:65:db:5d:0a:
                    60:c7:28:b2:16:6c:00:1a:94:a9:3f:71:38:3f:8b:
                    e9:0e:59:a3:f1:ce:c4:12:49:cb:9d:06:77:dd:70:
                    4c:f3:6e:cc:7b:e9:7f:c5:48:09:a1:25:cf:07:9c:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:E4:76:9B:3B:54:ED:54:C9:FA:DD:DF:4F:B1:68:F2:CE:10:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d795fd4-5056-3b9c-b858-b66bf1907e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ab:ed:a9:06:80:61:a8:51:c5:3d:65:a0:38:54:72:a7:ba:
         4f:82:3f:3e:0a:46:17:ec:d0:32:99:1d:ef:06:5a:d8:e6:7d:
         1b:d9:db:4c:4e:2f:13:dd:84:49:cf:4b:4a:f5:64:bd:2e:34:
         b2:1e:3b:15:51:37:21:28:bf:32:f2:9a:e1:10:99:47:d3:be:
         cc:45:4a:e6:84:77:c9:74:7f:c6:71:ff:15:d6:ed:76:2d:10:
         08:4c:3d:64:3b:84:92:94:ce:a3:64:51:1e:39:24:0a:82:2e:
         46:52:c0:4d:c6:6d:e4:72:00:38:99:5a:bf:3e:8c:9b:23:34:
         0a:5a:8b:4f:2f:ec:c1:bb:41:c4:e7:51:b4:54:b8:53:f3:38:
         c7:70:f0:a0:fa:fa:ec:cf:05:0f:7f:73:dd:fc:01:9a:0f:74:
         d6:f1:6f:ed:2c:4a:74:61:33:4f:41:94:ef:ae:c0:d2:1d:a8:
         e6:cb:41:0a:81:5d:17:a8:b4:60:c9:40:a3:64:34:54:b9:40:
         c4:1b:44:a1:6b:88:5c:e3:8e:d0:c4:58:74:1c:52:c2:40:36:
         96:98:5a:c2:b5:ea:52:ab:9f:ad:78:07:c7:18:eb:71:20:41:
         52:90:92:07:11:df:cc:14:fa:7b:70:57:87:82:22:c6:4e:8c:
         67:ac:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:13 2025 by rpki-client