Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d5f455-0df7-3095-abce-93e8d8b65307.roa
File:                     74d5f455-0df7-3095-abce-93e8d8b65307.roa (raw, json)
Hash identifier:          rAE7oc07oyg/fALE3LThchPKcrA2dwwQqaM+T0fZNhM=
Subject key identifier:   B2:2B:0C:7B:23:0F:70:C2:2A:91:EA:B5:EE:39:F3:42:91:F8:96:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371E421A55C16B8A372580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d5f455-0df7-3095-abce-93e8d8b65307.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1e:42:1a:55:c1:6b:8a:37:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=fcf92373-c4e7-4d46-bc75-6934607be61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:17:bc:a0:b6:4a:39:5e:ed:8d:31:d0:cc:
                    01:e6:b8:35:53:85:44:e7:1f:23:7f:0b:e9:80:03:
                    04:28:9d:29:9e:b3:83:43:25:5f:0d:ee:d7:87:9c:
                    08:c4:68:be:1a:19:7d:0a:12:fb:0a:c5:84:dc:ec:
                    ca:b6:18:d8:23:b0:2c:94:68:84:5b:43:be:bd:d2:
                    7e:54:5c:c2:eb:3f:4e:60:34:25:ad:55:b6:a4:37:
                    30:42:54:cf:70:14:c0:a1:bd:61:ef:6d:61:ba:37:
                    e2:52:da:86:a4:fb:62:e4:c8:b1:75:4e:98:d6:e7:
                    a7:c9:e4:b4:33:b4:5e:b0:b9:56:2b:03:5f:ce:56:
                    75:b8:0b:e7:49:8d:2e:2e:6f:ac:b7:85:56:50:0b:
                    b1:7a:52:41:2f:33:b4:5b:5f:69:c9:ad:87:aa:5d:
                    07:31:8c:ab:c9:80:ac:1f:f8:c7:7f:6b:6a:85:43:
                    44:e3:ff:cd:ca:7e:00:77:81:d9:0e:1a:b2:7c:79:
                    73:22:2a:9d:31:00:37:11:7f:5b:74:73:26:0e:96:
                    78:ca:6a:f1:b3:91:b0:7d:f5:3b:68:9b:24:62:13:
                    01:fd:b6:a2:e3:37:c1:de:92:8e:12:42:62:4e:85:
                    d3:f1:81:63:be:28:6c:a5:2a:f3:39:9d:04:60:b4:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2B:0C:7B:23:0F:70:C2:2A:91:EA:B5:EE:39:F3:42:91:F8:96:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d5f455-0df7-3095-abce-93e8d8b65307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:e8:4e:70:20:26:93:b5:a3:df:58:48:18:d8:bc:fa:61:
         0f:8a:0b:39:a7:c8:d9:7b:05:7c:f6:89:a6:d9:fe:7f:4a:1f:
         55:7c:ea:41:86:8b:8d:99:f5:c6:99:79:d7:1b:65:66:a9:2b:
         a5:98:12:40:ea:06:ea:72:f3:6a:2d:d7:62:ff:42:13:1c:ac:
         fd:53:2c:e5:c5:02:91:e2:4e:59:dd:b4:4c:28:d5:e5:1b:92:
         ab:af:90:dc:a8:05:7c:42:c7:ef:95:b4:16:cf:ab:04:9a:0e:
         46:ed:f5:37:d9:a2:ff:12:b9:5f:42:31:a8:4b:71:40:06:0d:
         ad:6c:26:25:ee:53:55:5b:e0:c4:cc:d6:aa:41:54:b4:e2:18:
         46:35:f0:44:49:84:8c:e1:c9:bd:14:e3:db:d8:53:c3:09:09:
         74:8b:97:51:bc:1f:84:b9:65:d0:41:80:30:c2:18:8f:60:03:
         a1:69:7c:ea:e7:9f:4c:85:73:9d:19:bf:4a:98:3c:c2:95:c2:
         a6:6e:33:1e:b6:90:b7:55:58:4e:9f:62:6a:1e:4e:22:26:fe:
         f5:7b:a9:c2:dd:9f:6b:6d:58:2a:18:94:44:73:63:12:b2:43:
         15:f1:58:35:97:25:18:c8:86:84:a8:8b:5a:fd:6b:f0:c8:ef:
         1d:7a:f5:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNx5CGlXBa4o3JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZmNmOTIzNzMtYzRlNy00ZDQ2LWJjNzUtNjkzNDYwN2JlNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMcXvKC2Sjle7Y0x0MwB5rg1U4VE5x8jfwvp
gAMEKJ0pnrODQyVfDe7Xh5wIxGi+Ghl9ChL7CsWE3OzKthjYI7AslGiEW0O+vdJ+
VFzC6z9OYDQlrVW2pDcwQlTPcBTAob1h721hujfiUtqGpPti5MixdU6Y1uenyeS0
M7ResLlWKwNfzlZ1uAvnSY0uLm+st4VWUAuxelJBLzO0W19pya2Hql0HMYyryYCs
H/jHf2tqhUNE4//Nyn4Ad4HZDhqyfHlzIiqdMQA3EX9bdHMmDpZ4ymrxs5GwffU7
aJskYhMB/bai4zfB3pKOEkJiToXT8YFjvihspSrzOZ0EYLQFRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLIrDHsjD3DCKpHqte4580KR+JaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzRkNWY0NTUtMGRmNy0z
MDk1LWFiY2UtOTNlOGQ4YjY1MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALGQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC2K6E5wICaTtaPfWEgY2Lz6YQ+KCzmnyNl7BXz2iabZ/n9KH1V8
6kGGi42Z9caZedcbZWapK6WYEkDqBupy82ot12L/QhMcrP1TLOXFApHiTlndtEwo
1eUbkquvkNyoBXxCx++VtBbPqwSaDkbt9TfZov8SuV9CMahLcUAGDa1sJiXuU1Vb
4MTM1qpBVLTiGEY18ERJhIzhyb0U49vYU8MJCXSLl1G8H4S5ZdBBgDDCGI9gA6Fp
fOrnn0yFc50Zv0qYPMKVwqZuMx62kLdVWE6fYmoeTiIm/vV7qcLdn2ttWCoYlERz
YxKyQxXxWDWXJRjIhoSoi1r9a/DI7x169S4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:14 2025 by rpki-client