Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa
File:                     7b39a0af-c021-3fa4-89db-994d894801bd.roa (raw, json)
Hash identifier:          ssq/yvdT/WRosVmPNnZgJ1MkJ7ljS65YH3ppxyi+z+U=
Subject key identifier:   7B:7E:6D:4F:2B:CB:69:3F:CD:B7:17:60:E6:7F:43:AF:AA:33:8F:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9A28B3D825F88D651800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b0c6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9a:28:b3:d8:25:f8:8d:65:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d4612698-e5d9-402e-b38c-43440aa55e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:e8:34:99:ac:38:0b:64:30:13:84:9b:02:
                    cc:48:70:0e:eb:f3:8f:c3:f1:33:9f:09:b1:58:71:
                    ed:df:ba:1b:91:ff:79:d7:d5:3f:d2:93:d0:a7:59:
                    d9:d2:44:2b:bd:1d:e9:ef:52:bd:19:71:1c:ac:8f:
                    74:4f:ae:9b:a7:5c:e9:6e:39:f7:41:93:b1:71:ff:
                    50:fd:c9:88:9a:f7:dc:2f:3f:a9:c6:df:f4:c7:b5:
                    52:c8:b4:d8:30:77:47:02:4a:dd:9d:17:82:53:ca:
                    93:9c:cd:79:a6:e4:22:6f:16:95:f7:78:b8:7d:f4:
                    b8:48:1f:2d:a6:69:e3:c7:da:c4:6a:76:64:2a:e5:
                    42:d4:82:31:2e:5d:5a:46:7d:bd:98:39:68:a8:ce:
                    6c:6a:0b:85:ab:3b:a0:25:0b:69:b8:dd:8a:73:dd:
                    79:23:bf:90:4f:04:6e:8a:c7:48:81:8d:6b:ed:fa:
                    15:90:2c:0d:2e:25:e8:93:b0:55:d7:ac:3f:94:5b:
                    67:2f:d0:24:47:e4:5a:25:88:a0:4a:82:c3:e1:e1:
                    89:b3:a8:58:78:ce:fa:99:4e:39:04:44:bc:da:c7:
                    0d:01:2c:57:8c:f9:46:ba:1f:5e:ab:2e:64:ab:ec:
                    bd:fe:b9:0e:ae:ac:90:b3:49:d6:db:30:02:3b:d9:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7E:6D:4F:2B:CB:69:3F:CD:B7:17:60:E6:7F:43:AF:AA:33:8F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0c6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:79:64:b5:b7:eb:1f:0e:f7:be:2a:60:2c:33:d1:0b:63:86:
         7c:56:3b:54:28:3d:5f:a9:12:10:43:2e:68:d4:7b:d0:c2:f6:
         7d:f2:fe:09:72:ba:c7:8a:2e:3a:04:56:07:ab:9e:a9:f7:e3:
         d1:50:fc:29:97:c1:8e:9a:c3:7c:ad:f9:a8:b2:a1:aa:27:4e:
         dd:06:46:56:3a:1d:9b:37:22:f0:5f:ae:58:90:e4:25:5e:81:
         4a:69:55:52:21:7c:2a:59:5e:52:ec:34:e6:50:6a:b3:3c:29:
         26:a0:7c:ee:1d:5f:6a:10:68:aa:83:99:77:a6:3b:4b:66:94:
         7e:6f:8a:d2:5b:47:95:fb:95:92:c5:56:b2:7c:f2:a3:06:6b:
         7f:b2:b8:fe:7b:7c:e3:76:52:d3:f1:41:d8:56:b4:bb:22:e4:
         cb:ea:17:b8:bd:42:e1:6c:b6:d1:ca:c6:ec:f8:e2:97:07:55:
         35:fe:c8:e7:25:09:98:4b:d3:59:ad:5a:36:b1:f5:47:48:81:
         94:4f:b3:be:2c:90:7b:c6:77:6d:d2:fb:a0:86:de:e7:84:33:
         06:53:4f:55:f2:14:50:c1:78:bc:a7:03:3f:e3:00:7c:18:ba:
         5d:6c:50:06:1f:b4:d6:32:b4:7b:de:07:60:8b:69:b7:15:04:
         03:a5:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:10:24 2025 by rpki-client