Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa
File:                     4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa (raw, json)
Hash identifier:          Ydp5namTBWJ1f+Vxi8glCqceDAjfAgCsasgVWgB4FYs=
Subject key identifier:   D2:B7:FB:5F:28:DA:B0:07:7A:A7:18:3C:5E:45:90:2F:2D:0C:B2:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9B4325AD5797F2614A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2600:1008::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9b:43:25:ad:57:97:f2:61:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=5cb9dd34-7274-4fc6-97f9-7760d2ad84b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:d3:60:9b:07:4c:ac:94:8f:3e:96:6e:22:
                    78:15:81:c6:24:50:35:01:31:af:b5:bb:35:05:56:
                    67:46:da:40:9b:aa:ba:24:25:96:06:d3:06:27:67:
                    50:50:41:72:22:ab:93:f0:41:8d:b0:1f:a8:93:dd:
                    20:d5:b2:c3:dd:99:35:9a:8b:83:ea:3a:52:e1:a2:
                    90:e3:7d:9f:89:e4:02:d0:e6:f2:98:7b:4b:fa:4e:
                    90:d9:0f:da:77:f7:6c:ac:2c:8d:95:90:d1:76:61:
                    40:50:9d:60:1b:1a:20:c6:72:60:94:8e:7b:13:61:
                    f9:54:8d:99:d7:9b:43:1b:a0:94:32:e8:54:12:bf:
                    2d:47:6c:3f:74:85:f1:f7:7b:13:1b:53:ab:af:61:
                    31:77:a7:0a:c6:b8:ce:13:79:c8:c7:d6:e0:f2:c4:
                    14:00:6b:be:3c:49:d8:03:0a:8a:a6:9c:7e:ec:91:
                    12:9d:4e:d4:07:1c:e7:45:82:fc:e3:44:b0:38:25:
                    8b:24:1f:c5:7f:dd:31:e7:e6:af:49:34:02:ed:c9:
                    dd:41:44:a8:da:ff:84:92:b7:9e:93:32:77:27:ef:
                    10:36:c4:59:c6:6f:16:89:70:f1:c4:cf:3d:07:01:
                    17:bb:dd:14:77:e1:29:90:48:9e:89:d7:03:52:5f:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:FB:5F:28:DA:B0:07:7A:A7:18:3C:5E:45:90:2F:2D:0C:B2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:02:f8:d5:02:8d:89:fc:42:86:88:64:aa:ad:2b:1e:30:
         6d:b0:78:52:7b:d5:17:f1:46:6d:e7:2d:90:27:3b:51:6e:62:
         d5:b1:e6:52:1e:27:ba:8a:90:7d:f9:ae:e8:56:d7:1a:be:89:
         68:bc:b3:62:78:bd:d9:09:66:3d:c7:be:f5:89:be:c3:a0:19:
         74:b8:4e:6f:fd:71:d1:86:88:ea:03:7e:52:7f:1d:cf:57:97:
         65:b9:7d:c6:be:7d:e3:c0:81:83:80:c0:71:7e:a5:09:c5:9e:
         d7:d7:42:3f:2a:77:31:4c:ac:3d:b5:d5:cc:15:70:af:fe:04:
         73:2f:cd:3c:10:98:f8:35:81:fe:e0:3b:74:c1:a2:77:a3:4c:
         8e:59:cc:26:7d:c5:3f:e5:70:e7:12:58:5a:ee:70:53:42:14:
         68:6c:e9:14:15:9b:e7:2b:f2:ee:42:99:54:7c:45:43:ea:ed:
         ed:24:ef:12:d4:d3:c8:42:4a:09:c6:74:5a:67:a2:3e:a3:9b:
         11:8b:32:2f:f0:a3:de:15:eb:42:e6:a5:cf:ab:7c:6b:d0:91:
         2f:16:c1:59:eb:46:26:ef:59:46:92:4a:b1:ff:23:58:ce:8f:
         a5:e8:b6:3c:b9:6c:9f:89:e5:fa:08:23:d8:33:f0:a4:32:f1:
         00:ef:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:17 2025 by rpki-client