Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa
File:                     bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa (raw, json)
Hash identifier:          Y3OWq77PJ5ivCuIuEnU49xlXJYwqELK/75XM4KqH9l8=
Subject key identifier:   D0:32:4C:9B:D0:33:F5:3C:DF:30:BC:AC:A2:EC:B6:61:29:74:BD:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B196C1D7D5DC716984515D940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1009:a025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:1d:7d:5d:c7:16:98:45:15:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=84b42aac-e51c-4b1a-8176-b6a1eeb468fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:42:3a:17:0c:c6:75:32:0c:f1:33:ee:e6:
                    b3:66:36:d1:6d:d4:ad:3f:00:0e:be:38:0b:bf:4f:
                    9e:43:48:20:41:a7:e4:e3:bc:0f:b4:da:94:e1:30:
                    7f:df:be:3c:6f:dc:f8:57:8a:13:b8:f7:3e:c9:f8:
                    16:fe:62:6e:bc:29:13:33:3f:73:43:3c:70:34:12:
                    de:25:24:1c:db:97:92:62:5f:6c:89:35:83:83:93:
                    1b:92:4d:81:a2:3e:bc:da:13:a9:5a:a7:60:9c:cf:
                    38:da:8d:fa:a2:e2:f1:55:8a:e0:c9:cc:6f:ea:b5:
                    f1:d3:20:51:54:2e:fb:8c:d4:1a:92:4a:e8:4c:76:
                    28:80:ed:05:9d:a1:3c:ab:5b:94:f1:6c:7a:9a:d1:
                    70:51:48:ec:9d:bb:59:6b:bc:43:65:67:7b:e4:59:
                    d3:a0:f4:ff:a4:7a:75:3b:21:14:a2:b5:be:97:94:
                    67:89:d4:62:89:cb:95:16:76:aa:3a:15:71:60:a6:
                    d9:ea:b2:d5:f7:bc:c1:22:8f:e3:e3:ec:6d:9b:07:
                    83:d7:c2:b5:bc:9e:70:8a:4e:c9:3b:ca:1c:64:24:
                    21:f0:de:af:a0:e0:29:a3:9d:0c:2d:fb:ba:e7:42:
                    9d:ab:0f:1d:c7:8f:1f:86:a1:1b:64:4a:dd:04:7b:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:4C:9B:D0:33:F5:3C:DF:30:BC:AC:A2:EC:B6:61:29:74:BD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:bd:eb:eb:19:ee:34:af:fc:74:24:86:4a:56:5f:53:03:
         40:34:0b:4f:11:7c:dc:f3:f7:59:70:7a:fe:71:ff:94:e1:7e:
         c5:72:08:93:4a:76:6a:11:0f:bb:0a:d5:62:99:0f:c8:3b:44:
         92:30:64:3e:60:e8:96:d6:49:db:ef:38:f8:ce:e9:4d:9c:2f:
         4f:d3:65:92:08:17:ed:72:b9:5c:14:51:8d:35:9b:c6:3f:cc:
         1e:0a:0e:f7:2d:83:dd:11:3b:fb:e3:90:bd:0e:40:3d:7b:27:
         97:0b:dc:d5:5d:1f:cd:87:b5:b3:ed:85:32:fb:34:41:65:99:
         25:2b:29:8d:85:dc:dd:28:00:ec:73:3e:66:18:d1:50:e1:b1:
         2f:6f:39:8e:25:49:48:e1:c0:95:2a:82:41:a0:9a:2d:32:a8:
         19:41:c9:aa:de:6a:be:14:b3:0e:69:2b:da:78:82:12:df:9b:
         77:c4:b0:2a:ad:3b:1a:90:b3:b9:fe:53:a7:72:e1:ef:fb:8f:
         43:d7:7e:f4:aa:bc:ae:2c:50:11:ac:51:81:a0:68:1a:77:a8:
         3b:b1:4e:d0:ee:f8:cc:0d:c4:fd:b4:92:7d:b9:58:f5:4a:20:
         32:27:b4:c2:e3:dd:df:61:12:b0:5d:4a:36:69:cd:c8:ae:53:
         41:7b:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:21 2025 by rpki-client