Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa
File:                     4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa (raw, json)
Hash identifier:          iCJnoDouAAslk5O7AKkq5+qzYuwznd0krUihogeS2gk=
Subject key identifier:   E1:14:2F:DB:11:DE:DA:D1:5F:97:E9:D1:64:DC:DD:86:BD:16:0A:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFC1C1E2FBDC8E0B774EBE9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:1190::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1e:2f:bd:c8:e0:b7:74:eb:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=2dc9a922-bbc7-458f-9362-a55bf0150acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:a7:6c:43:c8:f4:9b:6f:9f:cd:4f:c8:f7:
                    bc:8b:2e:3a:a2:08:e8:f8:dc:b8:f6:64:e2:70:9b:
                    e3:20:37:d4:3a:e0:28:e3:4d:da:e7:ee:f4:b6:8a:
                    a5:11:84:c9:34:f2:f1:57:48:23:08:55:8a:fa:78:
                    c6:e9:c2:2e:bd:d8:5e:38:73:d7:6d:fa:07:85:b8:
                    6a:a0:93:54:f1:1d:96:cf:09:98:57:5e:1e:95:6b:
                    ff:b1:a9:5c:fb:e2:a7:f8:7e:67:46:76:8e:61:12:
                    51:16:63:cc:db:8b:a4:fa:78:a0:29:a8:2c:50:37:
                    b8:c2:91:a7:e5:4d:36:4c:40:59:aa:13:a2:8f:b9:
                    c3:8c:de:eb:33:dc:15:ac:53:46:59:3a:d3:72:10:
                    03:8b:6f:ee:d9:6b:94:c8:5f:00:16:ee:3b:68:bc:
                    72:cc:4b:a4:d9:7c:20:36:60:fe:d6:ae:02:4b:33:
                    07:b7:24:af:30:7d:5a:19:3f:2f:fe:59:18:85:f7:
                    63:96:bd:b5:07:3e:3c:c8:12:15:cf:7e:bd:5d:d2:
                    4c:47:d8:6a:60:84:ba:09:ea:ff:20:ba:ae:d8:d5:
                    92:ef:08:00:c8:e1:30:00:b9:91:ea:00:39:5a:4f:
                    ed:fe:af:f5:83:ce:5d:00:13:28:86:28:5e:7b:84:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:14:2F:DB:11:DE:DA:D1:5F:97:E9:D1:64:DC:DD:86:BD:16:0A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ddfa82a-2c07-3d6c-8e9d-18f8aa5d599a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:1190::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:ec:1f:b3:99:f6:af:56:19:e5:c0:1c:f2:6b:ea:bf:6c:
         a8:29:15:cf:1e:39:27:4c:95:fc:50:fe:e2:e7:18:ba:4d:34:
         22:72:63:c9:39:70:fa:aa:e8:52:50:f5:dc:10:04:63:00:37:
         72:2b:ce:26:58:b6:6c:28:d0:22:f7:76:f3:48:1b:95:3d:08:
         4d:e4:3e:3c:0d:74:2e:5a:7a:45:05:b9:1f:6f:25:cf:f4:1d:
         53:c1:1b:e7:2d:1b:5d:1d:be:24:0c:b0:1c:9c:71:6a:99:99:
         1d:ef:3f:0b:9e:52:a9:3b:ca:e0:13:7b:a4:a0:28:aa:3a:6c:
         3a:4a:1b:f8:fd:c3:99:cf:b2:fc:f5:80:9a:11:0e:58:74:f8:
         80:58:58:35:ec:b8:64:d6:bb:c0:b3:6d:8c:f3:6c:0e:79:68:
         aa:0e:72:27:ad:9e:3f:04:d6:5d:00:5a:1e:76:23:bc:c4:05:
         77:af:46:25:31:d2:3e:94:33:43:c2:a8:3e:27:9b:4e:97:f9:
         ab:38:2f:37:41:4b:0f:da:4b:94:00:36:b8:c8:dc:82:2c:03:
         f2:a0:37:31:58:72:d7:c8:e4:81:6b:fc:97:27:61:b5:6c:2d:
         24:ae:c9:f1:cf:ef:e8:8e:80:b3:72:cb:ae:11:b5:e1:ed:ed:
         ab:44:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:37 2025 by rpki-client