Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa
File:                     c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa (raw, json)
Hash identifier:          u5Fc52uP7rsqKOCP8D2CpjPdj2PhUTFc3VpKolllz4A=
Subject key identifier:   33:CE:96:39:AC:79:9A:59:10:16:52:EF:08:31:B9:BF:52:EE:0F:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7E0EFFD3412DD89DD9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:b1e2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:7e:0e:ff:d3:41:2d:d8:9d:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=ad59d170-d31b-4561-b507-602dea023117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:e8:d1:94:cd:5e:8c:a6:7a:eb:ef:77:98:
                    c7:59:e7:3a:ff:22:7a:05:51:3b:33:5b:77:7b:a5:
                    17:68:ef:de:1a:d6:cd:4b:a1:11:93:45:b7:ac:3c:
                    bc:5d:2c:b6:76:37:17:5c:da:55:34:ff:16:62:74:
                    40:8b:6a:58:e0:93:b5:8e:41:a3:5e:94:7e:56:19:
                    99:f5:c9:f4:ae:b5:fd:40:89:53:88:b1:68:e8:91:
                    40:2f:86:7f:4a:94:0b:99:68:67:b9:dd:7c:82:8b:
                    f3:fb:db:ec:98:63:53:43:21:6c:97:60:5b:83:48:
                    66:9b:ec:6d:4c:16:15:5f:2f:fd:84:4d:1e:f9:e1:
                    94:83:3b:70:58:cd:a2:af:5f:c1:15:c9:3f:04:8d:
                    13:46:52:58:8b:2d:b5:97:0b:6e:6c:b6:6a:03:6f:
                    b1:6e:54:d2:3f:d3:22:41:d0:91:83:bf:f7:38:6c:
                    6e:15:b6:27:a6:64:59:23:af:e8:98:83:c1:17:d8:
                    15:91:7a:28:5c:d8:9a:3f:16:e1:28:33:63:9a:13:
                    98:ae:2c:08:06:63:66:04:09:1b:38:9b:72:e3:8b:
                    5f:98:39:55:d4:6f:5c:64:11:0e:f3:a7:63:e8:ad:
                    ae:bb:7c:2b:6c:f9:d7:4c:7d:19:4e:10:ea:ab:98:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CE:96:39:AC:79:9A:59:10:16:52:EF:08:31:B9:BF:52:EE:0F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47b21dc-e8ad-3b7b-abea-d309b8c4617b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1e2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:14:cd:1e:3d:78:90:79:31:8a:c3:ec:dc:ec:5a:88:5f:
         38:79:d1:b4:a2:f7:00:ce:42:2c:ae:b4:96:58:8d:b2:c6:e5:
         45:1f:42:bc:e5:d0:ce:18:15:e7:ef:c1:70:79:9f:49:eb:03:
         72:01:b3:7f:29:17:bc:27:f9:20:1f:99:d5:42:bd:6d:3d:e6:
         f9:f6:19:ac:c2:37:8c:5a:64:8c:93:52:d4:24:c1:02:97:7e:
         14:d0:3e:04:da:e6:92:50:7c:39:d7:a6:5d:89:13:5a:38:73:
         e5:cf:08:ab:0a:b7:12:e5:0d:1a:13:b1:bd:cc:24:67:b6:52:
         8d:82:5e:fd:bb:79:2b:09:e3:2f:d9:93:7a:3a:64:31:2c:5b:
         13:c0:72:77:b9:47:5d:37:be:f0:ca:aa:20:2e:c6:da:e1:76:
         8c:bb:1f:95:a7:42:4a:cd:b4:d8:10:28:86:1a:12:ca:91:ab:
         db:9f:17:f7:58:88:df:16:0c:00:15:c6:8c:5a:82:16:92:57:
         cf:c3:26:36:ee:50:9a:45:0d:fb:c1:94:6b:f1:4f:e7:3b:f5:
         24:db:de:b4:fc:93:31:db:2e:63:6c:d3:82:1f:c1:38:73:8c:
         4b:22:9b:16:07:71:44:f5:61:92:e8:6f:93:ff:06:62:14:54:
         b4:29:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:57:06 2025 by rpki-client