Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82b8eaad-2c2b-3c8d-9341-1ae590dff452.roa
File:                     82b8eaad-2c2b-3c8d-9341-1ae590dff452.roa (raw, json)
Hash identifier:          0wKnULkv8Z2uGV9Umgh+D8UFQBYqO20/f+3j63rxmeA=
Subject key identifier:   E4:AD:4E:AC:1E:8B:E4:5F:B5:4A:56:FB:2C:93:49:92:6A:46:F4:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36E9A0B68C6EB7057F6440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82b8eaad-2c2b-3c8d-9341-1ae590dff452.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:d040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e9:a0:b6:8c:6e:b7:05:7f:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5bdc1fbf-97e1-497a-91bb-a17eef37e1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:1e:ef:b4:51:ad:f0:a9:b8:3e:10:c7:5e:
                    75:1c:a1:72:3e:d7:a1:54:24:7f:70:ab:a0:de:b7:
                    16:44:27:e6:59:15:3c:1f:ce:27:b9:df:f3:74:f0:
                    ac:0b:95:72:23:99:3e:ce:66:b5:b9:b8:32:22:0b:
                    ca:09:e7:b5:3f:dc:3c:18:66:04:b2:de:34:ba:c2:
                    35:1c:cb:3d:a8:bf:06:22:04:4a:c0:b3:83:ab:19:
                    a9:ef:46:a3:5a:90:9d:8d:95:b6:fd:2a:da:ea:24:
                    d5:c1:ef:1b:48:5a:4d:06:af:c7:71:97:9c:78:d8:
                    ca:b8:d1:db:9b:70:ee:26:9e:99:b3:a5:ea:e6:81:
                    30:6e:bf:95:89:2a:14:3a:90:79:b3:74:24:8a:1a:
                    c6:8a:aa:5e:28:0f:87:15:a9:d5:2b:e3:65:53:75:
                    e4:d2:4a:bd:70:40:d4:06:ec:6d:30:92:dd:17:5e:
                    b5:b2:23:4e:9b:55:9a:19:1d:6b:bb:6a:5e:1f:af:
                    30:e4:5d:e1:00:47:6b:58:2c:8d:56:96:28:8e:d3:
                    bb:50:37:e3:80:02:56:14:e2:f2:cd:84:f5:0c:a7:
                    f4:5c:3f:52:03:b6:9e:cf:0e:f1:bf:fc:4d:4b:af:
                    bd:d8:09:a4:17:9a:73:ad:35:dc:ff:09:9b:b4:58:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AD:4E:AC:1E:8B:E4:5F:B5:4A:56:FB:2C:93:49:92:6A:46:F4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82b8eaad-2c2b-3c8d-9341-1ae590dff452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:3d:ed:a5:7f:db:b0:e0:8b:9d:76:ae:49:47:3c:71:8b:
         2d:7d:1b:27:2e:c2:61:bf:06:73:7a:32:8f:21:38:fd:73:72:
         66:03:72:69:da:f2:07:7a:3c:7b:2b:94:37:9d:f5:50:0d:45:
         1d:b1:c3:19:42:64:c7:72:dd:43:14:b2:2a:b5:86:7d:e5:6d:
         64:3d:f7:2a:05:50:15:61:9f:95:ec:b4:c8:b5:15:3a:40:4d:
         f2:4f:25:75:be:34:1b:c4:41:db:93:96:99:3f:17:f8:87:22:
         cc:ff:d2:a3:80:b3:e8:15:d5:91:f1:ce:ec:6a:74:5c:92:7f:
         9c:0c:9e:73:14:e8:d0:15:45:d1:65:ef:20:da:27:74:76:bd:
         fd:97:0a:c2:ab:82:da:27:8a:9d:03:d6:c7:21:6b:4c:fd:53:
         45:76:9f:11:19:10:bf:3b:b5:c3:37:8f:ca:5b:13:6e:f1:8f:
         10:7a:38:9f:06:56:a4:0a:2b:16:3c:be:f7:09:f0:7a:71:f1:
         8b:49:70:1d:40:ec:6d:21:8c:07:b9:32:bc:7e:37:e9:47:6f:
         ac:f5:e5:88:cd:84:34:91:61:8b:d4:43:6c:5d:ed:ba:5a:dc:
         68:8f:eb:5f:5e:ae:78:73:c2:bd:6b:0c:86:0e:aa:ca:98:af:
         b9:de:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:03 2025 by rpki-client