Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52792166-666c-3ee7-a8d6-5189d20478ef.roa
File:                     52792166-666c-3ee7-a8d6-5189d20478ef.roa (raw, json)
Hash identifier:          k6RsZNIsHuPLc73zFF6BFcNKdKfy6MxE6oHn7Pb0rp8=
Subject key identifier:   F9:B0:22:FF:E1:4D:98:FF:F5:8D:39:D2:69:6A:16:06:96:9E:1D:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117C4B10B728A3CC434B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52792166-666c-3ee7-a8d6-5189d20478ef.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1014:b0a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7c:4b:10:b7:28:a3:cc:43:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=c35a119a-53ba-45ca-b80b-523abfd74361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:e7:28:7a:b1:55:db:64:d3:99:52:c5:44:
                    0e:3b:9d:dc:fa:88:f5:b0:b1:91:58:b6:d7:bf:6e:
                    69:ce:3c:fb:68:ca:9b:dc:4d:09:2b:ac:92:3a:47:
                    54:52:ce:2f:7f:68:b5:3e:9b:2a:d4:5b:60:62:92:
                    f2:d7:03:63:ea:33:34:05:c2:4d:10:7f:8c:e3:74:
                    96:32:30:74:6d:b5:98:20:fa:df:dc:85:3c:8b:92:
                    c1:47:b0:a4:ea:c3:90:63:28:c7:0e:ce:c3:4f:db:
                    37:89:23:88:c0:93:33:10:58:ea:98:0f:7b:10:e4:
                    08:05:e8:cd:61:b4:03:f6:2d:fd:e1:31:d6:55:53:
                    12:ba:d2:2c:4c:5f:0d:2c:f0:a5:31:ed:6b:02:18:
                    b3:d5:66:80:ac:68:f8:cd:4c:ec:fa:8f:e7:45:21:
                    0a:55:d1:1b:da:e9:1f:a3:12:65:e5:b0:9d:76:33:
                    73:21:a4:8e:1a:b4:c3:2c:64:4e:8b:99:60:59:e9:
                    3c:86:09:1f:cf:1b:56:60:26:8c:8b:5c:1a:52:57:
                    2a:f5:c2:c9:52:71:c2:9c:2d:9b:fd:02:92:7b:8c:
                    3d:3d:41:70:3f:ad:97:24:bc:da:5d:f1:b8:a4:f0:
                    58:58:20:30:6c:2a:d7:ac:44:36:f4:ea:64:b9:15:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:22:FF:E1:4D:98:FF:F5:8D:39:D2:69:6A:16:06:96:9E:1D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52792166-666c-3ee7-a8d6-5189d20478ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b0a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:b1:c4:fd:d5:89:eb:25:af:e3:12:71:23:3f:2a:e9:a6:
         19:97:f1:f4:bb:4c:87:b8:a6:1a:e8:51:87:4a:45:03:36:5e:
         70:cf:90:06:9c:9d:00:18:74:ba:c2:61:f8:ce:cf:33:70:0c:
         36:de:0c:40:46:c0:bf:e3:ee:d7:b5:86:86:f3:19:a4:2e:ca:
         45:54:7c:9e:e9:4b:44:5e:9e:7b:3e:d3:c9:9a:10:b7:6b:fa:
         45:06:26:bd:04:32:f8:7b:57:3a:7e:17:b5:ea:1c:20:3d:87:
         8c:21:cb:b6:69:e2:9c:66:1f:31:80:79:b8:d4:69:f2:e7:ce:
         bb:2e:19:fc:48:ec:a2:da:53:3a:8e:a1:39:48:ce:a0:d2:e6:
         4d:bf:4f:41:9f:7d:0f:b2:92:8c:fc:fe:a8:64:ab:5d:a0:3b:
         f0:ea:16:02:0c:11:b6:f2:7f:e7:a9:2d:6c:28:05:f9:cf:86:
         d9:20:1a:8f:88:8c:83:7e:ae:5b:a9:0b:3e:a1:55:5a:90:53:
         59:71:65:b5:04:6e:50:fa:86:47:1d:0e:63:68:f6:69:52:1d:
         8d:64:1e:c0:1d:8c:12:4d:fd:85:4c:40:97:78:51:46:c4:6c:
         e1:fe:75:16:a7:c0:10:00:4f:3c:d2:85:e6:dc:cd:79:7c:3b:
         fd:66:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:33 2025 by rpki-client