Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97b9098-5e57-30fb-95f3-860330ce5655.roa
File:                     b97b9098-5e57-30fb-95f3-860330ce5655.roa (raw, json)
Hash identifier:          rclKRoaXk5r9S+iiOsOQ3E38NSIE/9BgzTRfSts72KI=
Subject key identifier:   B8:97:24:48:07:64:3F:67:E0:33:6E:D9:AE:E5:B0:C1:F8:68:8E:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3721ECFEEDA8C94F5C7BE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97b9098-5e57-30fb-95f3-860330ce5655.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:d0c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:21:ec:fe:ed:a8:c9:4f:5c:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e3fce763-395d-469e-8d28-3e11dc8cf8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:e3:e2:98:bb:83:5b:06:23:1c:fa:6b:22:
                    f7:22:0e:fb:c3:3a:08:44:59:c9:c0:f0:0d:3e:4c:
                    c6:25:8a:ee:78:34:96:f9:50:2c:2e:22:6f:bf:1b:
                    20:a7:cc:e5:d0:d6:2f:ba:ed:11:71:c3:8f:13:41:
                    e2:c6:f2:10:04:fd:1e:bf:ab:f0:54:b9:09:b8:84:
                    34:64:44:8f:f6:7e:d1:60:80:4e:fd:c9:d8:4b:44:
                    c2:75:c5:e0:9a:9d:25:ef:90:31:a6:77:54:b1:7a:
                    21:02:cb:93:3f:be:e5:3f:f0:4b:12:63:1a:87:35:
                    73:43:d7:6e:8b:0f:fe:95:f8:f0:ea:aa:0a:a6:a7:
                    53:26:b0:3a:05:2f:50:a3:a6:a5:c0:4e:2d:e3:51:
                    dd:2e:94:ca:c1:3b:b6:ac:72:c0:ed:ae:5a:46:a7:
                    fa:5f:09:f2:1b:03:d9:f5:5e:fc:71:a8:5d:97:73:
                    bf:1f:77:c5:8f:1c:ea:48:ef:7c:87:78:c6:28:d3:
                    44:fe:f6:78:73:0b:75:b8:44:5e:0d:b7:88:df:4e:
                    d7:03:a1:03:7a:ff:b2:af:04:47:c7:48:2f:25:81:
                    d2:06:2d:d2:47:07:bf:22:92:1d:52:a6:1b:57:fb:
                    d0:3e:c7:da:be:2a:ae:ea:ff:4c:4a:b7:98:a9:08:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:24:48:07:64:3F:67:E0:33:6E:D9:AE:E5:B0:C1:F8:68:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97b9098-5e57-30fb-95f3-860330ce5655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:d0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:15:cf:21:83:26:c9:56:73:c8:75:2c:f8:9a:4e:4d:4e:
         e0:a0:cb:20:61:fb:da:a5:ff:6a:34:62:17:b7:58:19:13:3f:
         7d:77:ca:62:c3:75:58:0e:ef:a6:ea:0b:67:c4:66:28:8a:0d:
         81:f2:b2:ff:57:81:7d:48:f4:93:d2:db:a3:4f:e3:d8:96:6f:
         6f:7c:52:75:2d:0c:ee:73:e2:d5:47:2f:ef:e1:dc:e9:01:7f:
         8e:87:c7:8f:aa:a2:46:fd:4f:d5:37:ce:22:2e:49:01:68:53:
         ce:dd:e5:b5:3a:63:34:66:1a:d5:ce:89:22:37:bc:52:d8:3b:
         9b:cc:44:ce:54:63:1d:17:c8:b2:ec:b2:76:c7:a4:00:07:99:
         7a:0b:f3:af:4a:95:56:59:14:87:e9:96:30:c6:25:5d:8a:7e:
         1a:a9:f1:3b:58:a2:cd:56:7c:e0:8c:f3:14:b2:6f:be:19:39:
         ad:ca:21:71:e0:8f:6b:37:40:64:8b:3a:f2:92:4f:af:da:d1:
         7d:1e:38:e8:07:a5:c5:10:c2:bd:3e:14:7c:ff:ef:01:ae:33:
         06:2a:28:08:7c:e2:0b:40:c6:da:cc:51:13:49:e6:12:36:e2:
         37:dc:22:c2:46:80:66:dd:9d:a0:94:e8:63:41:be:a0:76:5e:
         82:7a:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:16 2025 by rpki-client