Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a14532-337d-31af-80cc-a598cf05bf60.roa
File:                     d4a14532-337d-31af-80cc-a598cf05bf60.roa (raw, json)
Hash identifier:          9DNrZx5DXLg67Naa5gOLUIceM8PnK0q3nfc0+1sE9Jw=
Subject key identifier:   56:87:65:5C:70:84:9F:CB:59:56:36:5B:11:C4:4A:33:AC:B1:F3:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371C7ABD8BA57E74E99800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a14532-337d-31af-80cc-a598cf05bf60.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1c:7a:bd:8b:a5:7e:74:e9:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b3f427a4-5ff3-4444-9800-6b13d7ab258d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:f0:15:4f:bf:78:9e:50:59:ab:96:35:83:
                    7e:48:70:b9:0f:a2:b8:e3:45:6c:46:80:3e:ef:a7:
                    0a:63:bd:8f:53:db:ac:84:b2:17:3a:d5:20:c2:de:
                    36:20:39:28:2b:3d:08:7c:0d:44:13:3b:75:d6:83:
                    45:66:97:ff:68:a0:e7:9f:b6:be:a6:b6:5a:9c:c6:
                    e2:d7:a3:aa:7b:44:4d:06:f8:99:8f:15:4a:86:21:
                    83:b2:7f:63:ee:c5:1b:69:b8:73:54:4f:86:3c:3b:
                    15:85:95:13:14:dd:2c:4e:49:f9:0d:98:be:b2:81:
                    b4:d7:ed:6d:bc:ce:34:2f:51:70:97:b2:8e:f7:8d:
                    44:a4:18:81:bc:7f:bc:1f:99:2e:10:ba:c2:5b:be:
                    82:f2:0a:85:f1:5b:23:02:00:ef:fd:5f:ff:6e:4f:
                    f1:75:32:73:b6:74:1e:34:e9:c2:dd:b3:1f:46:dc:
                    62:39:4e:40:20:51:b6:af:8c:2f:99:d6:5e:e4:58:
                    c8:7e:a2:63:01:05:20:42:94:9b:e3:04:45:ce:4a:
                    11:11:d3:dc:0a:89:c6:96:35:8a:34:52:82:43:50:
                    2b:a2:3a:ee:a3:3b:1e:31:92:3f:37:ee:b8:c5:b0:
                    19:b2:91:74:4b:eb:c2:0a:e1:62:ec:4c:41:c3:21:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:65:5C:70:84:9F:CB:59:56:36:5B:11:C4:4A:33:AC:B1:F3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a14532-337d-31af-80cc-a598cf05bf60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:62:b9:0b:42:97:e9:c4:37:aa:85:85:98:35:ca:a3:fa:
         55:62:bf:ff:d2:94:bc:c3:d1:71:3f:62:68:67:98:08:cb:15:
         6a:bf:47:84:f6:24:28:96:9b:cc:d0:6b:ee:46:86:c0:8d:31:
         20:17:4d:1e:2e:85:77:15:ad:03:18:9e:b6:f2:19:20:a8:81:
         fc:4d:46:bb:34:af:5a:5c:fc:28:31:8e:f3:62:c0:26:8f:15:
         73:7b:bd:5b:8f:ef:ce:bf:71:29:d7:38:6b:b9:00:e6:30:82:
         f0:89:c3:b0:1f:de:d0:02:a5:97:70:ff:ef:53:ee:32:f3:d7:
         23:75:99:09:bb:7e:28:f0:6d:5a:98:0d:e8:ad:fd:90:b3:c1:
         ce:ea:fd:fa:7c:a9:dc:ea:bf:79:d6:95:26:d2:28:93:22:8f:
         02:f8:c3:82:26:9e:39:30:d8:a2:f8:9b:57:39:d4:9e:fa:a8:
         79:cb:9a:89:fe:e8:a8:fe:09:45:2a:ea:92:a5:93:89:a5:3e:
         50:ed:fb:56:57:e5:f4:9f:00:44:28:a6:3b:6a:d3:bd:12:b1:
         3c:c0:08:80:df:e6:75:24:7c:b9:cc:bd:3d:a8:78:5c:39:34:
         c9:be:ac:22:fc:ca:cb:28:65:74:77:13:61:0c:8d:78:ff:97:
         74:d2:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:40 2025 by rpki-client