Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa
File:                     6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa (raw, json)
Hash identifier:          5eFx8vnefEuv2C/fB5XkTBj8WcnT5R6CJ5cwx5N2Mtc=
Subject key identifier:   2C:F3:AA:5D:D2:2F:4B:93:74:5B:73:93:94:26:5D:AD:25:24:CD:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EEF5B44A37C6120568E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ee:f5:b4:4a:37:c6:12:05:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9410919a-c085-4413-9c41-3abe88e7b2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:ec:58:4b:17:49:79:5c:67:3b:95:4a:d1:
                    8e:72:27:92:ec:43:f5:9b:a0:1e:3c:29:ad:7d:76:
                    22:d3:03:e4:d3:54:ea:46:be:e6:46:a1:37:48:2e:
                    b0:f6:12:37:08:fd:ab:79:ad:e0:6d:c1:78:e8:7e:
                    f8:5b:54:f9:e6:7d:6e:36:99:03:e8:11:e9:07:3c:
                    b5:64:3e:ea:cf:df:4d:79:a6:9e:73:9e:01:3a:61:
                    c3:45:a4:1f:10:50:49:48:f5:da:99:3c:51:ba:be:
                    b8:b5:8e:fa:56:82:c8:75:23:dc:fa:55:1c:d9:53:
                    23:7a:c0:94:75:ca:3a:56:c6:5f:4c:4f:7b:c0:32:
                    85:d7:e9:83:31:79:65:a3:80:73:0b:e1:91:f3:2f:
                    af:8f:8b:56:e5:e3:55:78:09:d5:07:0e:52:84:30:
                    b5:47:b0:79:9c:10:e7:a9:f1:ad:cf:e4:b2:12:4c:
                    5f:df:e8:6b:88:15:7c:55:b8:ff:91:78:e5:71:eb:
                    b5:4f:a6:25:d8:ca:8f:18:77:6b:2c:5e:67:8c:9a:
                    3a:0b:5a:52:9e:0e:35:22:ca:a4:e2:14:12:3f:0c:
                    2e:2c:b0:e0:e8:72:bb:86:f9:d4:f2:c9:8b:56:5e:
                    62:0d:ac:74:cb:83:d9:6c:0a:a6:77:db:68:28:3c:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:AA:5D:D2:2F:4B:93:74:5B:73:93:94:26:5D:AD:25:24:CD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c2caa56-4b2d-3f6f-9f0b-15a4f2f84bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:74:4f:30:db:68:b2:c7:94:f0:b9:97:c4:e2:af:f7:40:
         3f:e6:da:e2:ea:0b:54:8a:a1:82:25:38:0c:d9:ad:f9:51:97:
         a8:6b:24:ef:fb:40:a6:97:34:b8:27:85:5c:05:3c:28:a2:f5:
         8e:c4:5e:6f:b1:d9:d2:04:ee:f3:50:84:70:2b:cc:91:a9:62:
         04:40:1f:28:8c:6d:83:fb:29:44:6c:9a:d2:5c:43:e2:37:a1:
         00:48:2a:a6:e9:7a:7a:74:c7:36:1f:4d:cd:cb:6c:e6:20:81:
         62:79:1f:2d:4c:05:fd:f6:93:ab:9b:73:5b:58:cb:0e:e1:49:
         6e:05:5d:32:0c:8c:66:63:bf:06:fe:56:dc:ef:64:95:33:3f:
         73:cb:61:08:0d:b1:f5:bc:43:1d:f8:25:d4:27:47:74:5b:11:
         5c:1f:1a:14:35:bb:76:27:3b:3e:91:21:e4:05:78:b1:f3:cd:
         67:10:ac:bd:05:02:7f:0d:21:2e:07:f8:9e:14:ff:68:9a:0c:
         e6:21:3c:51:eb:34:d8:98:05:dc:5e:3d:37:bd:72:70:b0:51:
         f2:f8:4e:a4:c2:44:08:97:f5:83:b9:3e:7f:d4:4a:24:f6:e5:
         ec:91:82:c8:45:10:65:b1:7a:34:b0:b1:68:6f:a3:13:5a:73:
         0e:e4:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:02:11 2025 by rpki-client