Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82cf02bd-2a24-32fd-b361-804b969c2b29.roa
File:                     82cf02bd-2a24-32fd-b361-804b969c2b29.roa (raw, json)
Hash identifier:          z/1Iz50wVoP+vVcznZq063nVLudxxrcEeCFr1P2jHDs=
Subject key identifier:   98:58:86:49:88:4B:BF:4E:8A:CD:12:3E:68:A4:8D:5B:0E:C5:AC:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2CF71BFD3F230E537E77A8A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82cf02bd-2a24-32fd-b361-804b969c2b29.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:a020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:1b:fd:3f:23:0e:53:7e:77:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e54fe3bd-0891-4c02-ae69-5bf2e5edde9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:ec:d8:34:bf:17:96:c7:2d:00:cc:0c:3c:
                    a4:28:c1:ac:03:23:c9:8e:a3:ea:8f:8a:83:85:12:
                    73:9d:59:54:f0:46:0e:0a:77:f7:94:09:7e:56:a6:
                    fd:bb:da:20:a6:7c:f8:c2:42:45:0a:df:bb:bd:95:
                    83:63:4f:65:30:9e:ef:53:2c:83:3e:bf:14:48:ad:
                    e6:06:b9:e5:db:d3:8b:ae:81:a5:e3:0e:f3:b6:30:
                    b9:48:c8:0b:0d:9c:0c:1a:ab:2e:31:21:b0:8c:83:
                    ed:2b:9f:42:f9:79:2a:40:59:6f:8c:9b:ae:87:8a:
                    fb:d7:c2:91:19:73:dc:be:ee:c0:9b:f9:ef:a2:5d:
                    72:37:73:c6:03:82:c5:c5:6b:aa:07:b3:54:5c:ca:
                    a3:8b:6b:ab:66:00:1c:89:b3:bc:c6:30:c8:aa:88:
                    32:ff:29:b9:0b:45:21:e4:11:ee:87:d5:89:9b:ff:
                    98:ca:1d:c4:03:0f:6a:ab:c6:26:d1:92:16:56:0c:
                    e4:44:bf:da:2f:1f:70:3b:07:88:c9:66:40:7d:6d:
                    97:5b:4c:1a:93:d5:b3:c8:3a:1a:da:43:36:31:cf:
                    59:f3:ab:60:74:b4:eb:51:b7:20:c2:be:50:04:70:
                    a6:90:f2:e1:71:5b:81:69:f1:6e:84:3b:2f:fb:09:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:86:49:88:4B:BF:4E:8A:CD:12:3E:68:A4:8D:5B:0E:C5:AC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82cf02bd-2a24-32fd-b361-804b969c2b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:bd:55:34:69:33:05:ff:b7:6d:b9:78:67:0f:cf:1f:bf:
         18:fe:9f:7f:0c:2a:a8:49:26:dd:d6:d5:ee:90:8b:9d:64:76:
         b2:a0:60:2f:44:69:3e:10:e4:38:29:28:c0:9f:90:83:78:60:
         e7:7c:20:e7:a9:d1:32:6e:0f:16:ac:81:c4:b7:15:b3:e5:f2:
         3b:3a:9b:41:b2:97:c5:20:48:4e:bb:48:0c:8f:46:e8:2d:e1:
         ee:6b:b3:13:1c:ab:87:17:7d:c8:52:a3:8f:28:b1:1e:84:1a:
         03:c8:48:5e:44:95:ce:1f:cf:14:c9:6f:48:81:f5:44:42:6e:
         b2:fe:60:dc:8d:1e:eb:b0:62:93:dd:0a:89:b5:6b:45:ec:c6:
         d9:21:66:31:9a:6c:35:53:6b:14:4a:60:8b:b4:ce:9a:85:b9:
         43:52:c9:6f:d1:1b:c6:98:18:ee:41:cd:74:aa:f1:0b:51:10:
         d1:5f:22:7a:53:aa:26:b0:7a:05:f9:d9:20:bd:f9:e7:08:9e:
         4e:e9:66:49:58:16:5e:fa:b9:01:a4:3a:24:98:c9:ba:c3:d3:
         b3:19:ba:63:4b:6a:81:f3:04:00:62:41:6c:86:c7:f1:7b:d0:
         03:e0:07:39:00:18:99:7d:cd:96:5e:44:9e:6f:e2:54:b4:47:
         33:ae:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:25 2025 by rpki-client