Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc75bbcb-f9bb-37f4-9e9e-db999ba1a2fc.roa
File:                     bc75bbcb-f9bb-37f4-9e9e-db999ba1a2fc.roa (raw, json)
Hash identifier:          /5DzWPDzNLQ1rkdVrk8zUJWvKcR7CVpnrH95vlBvOPw=
Subject key identifier:   15:67:90:9C:0E:EA:D5:D5:CF:ED:EE:71:CC:F6:F3:8E:4B:EF:7E:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7B3E87DF305F459EE220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc75bbcb-f9bb-37f4-9e9e-db999ba1a2fc.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:7b:3e:87:df:30:5f:45:9e:e2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3034d982-7a3f-473d-a138-6301a014d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:e9:34:48:b5:f2:cc:55:d7:7f:1a:68:6d:
                    60:93:56:50:78:a5:08:96:0a:77:99:3b:41:25:93:
                    0d:90:fc:10:79:82:49:54:57:c6:14:05:c6:77:35:
                    a8:98:a0:78:1a:46:a7:78:95:a3:54:31:4f:d9:cf:
                    f0:f3:ee:e0:76:74:27:31:2e:84:3e:c8:08:05:31:
                    00:78:37:3f:b8:00:7a:3b:5a:4a:89:b2:35:d7:df:
                    74:f2:5b:3c:d8:f4:cc:cd:49:51:cd:03:d3:59:5f:
                    2b:34:9e:97:a6:d9:1d:84:9b:99:4a:58:0c:79:0e:
                    8f:41:3a:c6:00:e5:c1:53:6d:23:07:2e:d0:0b:7e:
                    bd:0b:65:42:c3:43:a7:ca:83:0e:54:d2:a6:6a:59:
                    dd:e0:b6:61:a0:df:e3:48:73:47:6d:dc:10:58:41:
                    fa:7c:51:5f:30:99:5d:d6:bc:1f:fc:b7:06:de:cd:
                    f6:ee:d2:fd:42:eb:d7:22:5a:90:da:94:4f:e7:30:
                    a0:e1:ec:d2:66:d2:e6:fa:11:8a:b4:9b:3c:3f:aa:
                    a1:1d:38:66:36:cd:d0:8a:b0:2d:e4:c7:00:08:e0:
                    9a:30:cb:0c:51:54:c1:9f:3f:66:99:72:15:84:4d:
                    c8:2a:6e:48:6e:58:0a:da:44:2e:f6:eb:27:39:76:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:90:9C:0E:EA:D5:D5:CF:ED:EE:71:CC:F6:F3:8E:4B:EF:7E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc75bbcb-f9bb-37f4-9e9e-db999ba1a2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:82:e3:46:90:0d:e8:1e:1c:9a:4b:bd:b2:ca:6e:4f:86:7a:
         12:91:a3:4f:6b:b8:f6:d2:b0:c9:e6:c3:8a:1a:1f:75:ac:c3:
         8b:e8:6d:f5:4a:23:c3:44:f1:c0:43:aa:25:8c:31:99:f3:73:
         f2:da:3b:e3:d0:92:a4:13:e9:4b:5a:41:4f:41:53:87:79:ec:
         09:60:5d:bf:1b:d5:16:7b:46:e3:2d:c1:2b:8f:f3:39:fa:33:
         04:31:2b:6f:1a:b6:fa:1d:25:b4:60:45:ac:53:fe:25:24:d2:
         fe:de:ee:5c:05:40:b3:d0:97:90:88:ff:82:8e:02:4e:2b:e0:
         11:12:e8:c5:5e:8d:8e:12:ef:c2:91:5e:7e:47:8f:43:26:da:
         e8:b4:56:44:98:c5:3d:48:b0:a8:4f:28:08:89:f7:4e:6f:a4:
         6d:9a:69:38:20:4a:4c:05:2c:c8:67:f4:86:a0:61:e2:f6:e5:
         9c:50:e7:d9:f6:34:90:99:f0:f0:81:04:d3:e7:aa:65:ca:53:
         56:6f:8c:31:11:68:43:e9:23:0c:59:8b:c7:05:4d:18:c5:e4:
         28:4f:b3:0b:a4:5e:d9:a4:97:b6:7c:de:a9:51:d3:92:a1:61:
         a3:af:04:df:e7:fc:4e:09:8f:8a:0f:f2:99:06:87:c6:dc:8b:
         90:ab:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:16 2025 by rpki-client