Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70e08e13-30d5-3277-a308-d3e5e786067b.roa
File:                     70e08e13-30d5-3277-a308-d3e5e786067b.roa (raw, json)
Hash identifier:          9plwFknOHigzJz1S+5jR+jgd2dTQ94E6jPIcUZZrELE=
Subject key identifier:   1C:11:80:96:DD:8E:3F:F3:B0:51:A0:17:3E:B6:FE:E1:E5:09:AB:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20B7F0EE97154F3ECD640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70e08e13-30d5-3277-a308-d3e5e786067b.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1003:b0f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0b:7f:0e:e9:71:54:f3:ec:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=f9f63aab-2716-4f88-b1d8-ba90ff0b4dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:a6:69:9d:1f:41:e8:43:cb:c3:6c:b2:26:
                    28:62:97:81:66:f0:37:9a:47:79:b3:ff:c6:ac:df:
                    bd:29:c8:b2:34:08:1e:d6:d5:29:ba:28:df:5f:f8:
                    73:c2:c6:85:cf:34:69:42:18:8a:27:4e:8a:47:f0:
                    e7:a7:a8:42:19:87:df:de:bf:de:65:f9:71:0e:ae:
                    ec:0c:6a:6e:42:ff:79:a0:e2:d7:2c:0b:ab:06:0f:
                    b7:63:6a:1d:af:f1:83:f1:8b:1e:64:d1:5e:0b:20:
                    ab:f4:22:66:7e:0a:35:62:9f:4c:bb:33:49:1c:2f:
                    ab:8c:ac:de:ee:a8:b5:2f:a6:57:e7:1a:af:12:73:
                    a4:b0:ff:89:f9:a7:0a:ea:45:8c:b0:23:7e:ad:3c:
                    5f:99:42:01:94:c5:97:63:53:d6:df:db:b6:45:8b:
                    b2:a4:ad:21:6c:88:39:cb:26:e3:bb:6f:6a:ef:9d:
                    15:15:82:43:e1:57:e3:b0:a5:9b:03:5f:3a:7c:52:
                    d5:4d:94:1f:64:8a:d5:36:27:3e:30:df:a5:64:73:
                    49:80:05:b4:35:43:45:a0:0e:df:15:12:c3:84:b5:
                    90:78:11:78:4d:84:9e:04:f4:f2:c7:61:ea:6b:48:
                    86:f0:78:86:9e:47:49:33:fa:a4:58:ed:3f:61:e3:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:11:80:96:DD:8E:3F:F3:B0:51:A0:17:3E:B6:FE:E1:E5:09:AB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70e08e13-30d5-3277-a308-d3e5e786067b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b0f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:7c:6d:35:fa:aa:72:4e:a9:f6:d6:ae:9a:0f:11:38:bc:
         65:5a:23:b7:8f:13:29:7a:0f:cf:a7:aa:ce:9f:bf:90:68:46:
         f4:72:3b:63:33:a8:21:29:2e:81:84:49:a2:c1:e4:f3:7a:bc:
         43:6c:5a:c3:17:da:ec:98:08:c8:95:9a:36:65:21:ae:94:9b:
         cd:33:28:08:82:3b:0e:f1:17:17:ab:b0:a9:1f:57:fc:d7:d8:
         8f:bd:40:59:1c:69:a2:a7:e7:ea:1e:a8:ea:bb:81:d5:08:b2:
         f4:ca:6b:d5:9e:c5:d3:16:39:96:12:19:f1:f7:ff:5d:90:23:
         f0:72:97:74:29:4b:4e:6c:71:a6:92:3a:db:b1:28:d0:da:88:
         d4:e5:5b:fc:2d:ce:47:8f:84:ee:2b:ef:32:88:22:0a:2c:68:
         64:b0:5f:16:7f:2e:aa:a1:63:c6:6d:82:5b:5b:d7:d6:51:b8:
         83:86:17:33:81:2f:a9:d4:69:25:0c:1f:8c:a0:96:c0:02:1d:
         76:4a:ce:ad:df:4f:82:72:b8:da:4e:3b:0e:03:45:7a:bb:05:
         e1:44:23:ec:73:72:ba:32:66:e6:72:f9:80:6e:de:05:0a:dd:
         36:e1:e8:ee:85:36:99:fe:7f:8c:b2:df:33:40:2a:51:1e:92:
         04:9c:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:22 2025 by rpki-client