Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
File:                     871eea0e-f873-37fb-b9d5-45136a056620.roa (raw, json)
Hash identifier:          L0R+u55BjXHgAdpWmNLZ9sFucxgt6wGAv0aXVF3pfV0=
Subject key identifier:   0E:7F:1F:2F:EE:F8:AB:1A:70:82:15:F5:79:88:A8:5C:BD:84:85:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C37247B5717932507F08D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1003:b888::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:24:7b:57:17:93:25:07:f0:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=671fc6fd-5cdc-4f4d-b07d-9ea4182288a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:c6:59:31:92:06:d5:ae:71:42:6d:4a:d2:
                    3e:79:6d:fd:cb:b2:d7:62:bd:a9:f4:a2:e0:10:cb:
                    01:8f:10:9b:28:05:e5:f7:b1:60:46:23:35:77:52:
                    79:b4:4c:39:0f:1a:4b:56:66:20:f4:af:c3:87:e8:
                    c3:85:c9:28:59:29:14:1a:52:7b:9e:87:6c:7a:a3:
                    9b:9e:02:d5:0c:77:bf:a0:ae:4b:92:34:ef:ff:4e:
                    ce:2d:8f:92:d8:1f:98:64:3e:85:c4:48:5a:9a:90:
                    b7:be:44:59:8b:c4:84:21:f5:00:bb:70:8c:3a:63:
                    a0:8f:f8:2c:29:ea:89:b7:11:84:53:18:11:38:86:
                    fc:82:2c:79:ca:0e:56:cf:f4:c5:fa:71:f8:d3:fd:
                    c4:fe:4b:57:14:9d:85:69:ef:04:98:50:cc:5c:e3:
                    f8:eb:97:dc:3e:03:a5:4d:3d:31:27:47:60:db:37:
                    e9:6a:cb:7d:bd:45:be:16:fd:ef:33:81:b4:83:3d:
                    61:58:bf:6b:3b:1b:93:75:0a:4b:0c:c1:17:ce:cb:
                    99:ef:50:27:11:ab:19:fd:ac:34:e4:6e:6b:d8:f0:
                    dd:27:ef:82:9c:dd:5a:a3:35:b8:5d:86:28:b8:22:
                    67:69:c2:74:5c:85:8b:7a:14:15:67:5e:91:9d:72:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7F:1F:2F:EE:F8:AB:1A:70:82:15:F5:79:88:A8:5C:BD:84:85:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b888::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:77:c9:00:01:d7:c2:5f:ec:c2:62:29:1f:9f:5d:ab:7f:af:
         0a:c2:71:64:75:d5:52:8b:c4:6c:2f:3e:24:a2:58:db:86:a8:
         09:a1:e9:0b:43:c9:85:cc:07:a5:58:33:9a:ef:2d:a8:cd:17:
         6f:6f:27:d7:86:41:c1:ff:42:87:a8:05:43:85:73:43:63:c3:
         24:4c:3d:c1:a2:6d:93:88:7c:62:5c:e9:0d:13:cc:12:98:ec:
         14:46:7d:63:6a:f3:1e:99:16:90:d7:05:21:30:e1:f7:cf:03:
         89:8a:e8:f0:d9:23:58:c4:10:d1:d9:b3:90:70:8c:f9:ab:e4:
         78:3b:01:64:fe:78:ab:4c:fb:99:bb:67:80:65:77:6e:d2:a7:
         e4:b4:8c:de:fb:d1:9b:67:c3:75:34:37:9c:30:c2:66:0f:b3:
         a3:22:42:53:0a:fe:8c:2e:be:8f:4c:a6:e4:43:c6:6d:99:37:
         d4:a3:24:34:62:4b:c2:4b:db:67:75:47:dc:81:4a:51:ff:32:
         85:89:1a:78:22:6e:fa:35:05:7e:5d:82:9a:48:6d:7e:41:1d:
         22:6e:1e:89:68:37:3a:03:6c:1d:1a:a8:33:20:a5:aa:e6:1b:
         63:b9:e9:72:96:4a:28:bb:46:00:b5:19:57:5f:a9:d3:b2:a3:
         da:7a:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:07:53 2025 by rpki-client