Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa
File:                     d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa (raw, json)
Hash identifier:          PR/nWKQEq90Nu/lCRjOPShEIe26z9+KPghrle+rI8/s=
Subject key identifier:   68:9E:1F:9B:3E:76:69:44:65:BB:E1:9C:45:D9:2A:33:96:BE:8E:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C99D30374334B565358A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:99:d3:03:74:33:4b:56:53:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=cd82c899-8a1d-472e-b973-c94705158c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:d2:27:ff:a4:58:8b:05:98:ab:45:9e:12:
                    5f:5d:21:ef:af:2f:40:57:dc:9e:5f:ca:27:57:e9:
                    56:ba:93:13:9a:94:8c:0a:51:3c:3e:2c:db:92:42:
                    0d:83:ab:0f:3a:7e:4e:49:86:33:01:c8:2c:eb:a1:
                    c5:e3:c8:dc:4a:83:04:20:b1:ec:70:ae:de:e6:f7:
                    90:64:35:69:5b:b9:b4:bb:a7:5b:53:b8:83:45:06:
                    8d:b8:5d:85:e1:89:36:97:2b:b6:7c:a1:e1:81:8f:
                    cd:d9:95:00:79:9c:ad:15:85:cd:b7:92:c2:48:8a:
                    f4:68:13:f0:d3:1b:c0:7f:ce:c1:e9:7e:01:07:41:
                    ce:2a:dd:64:17:95:4b:2b:f5:2e:4f:f4:79:4a:14:
                    9f:bf:29:c4:9d:16:a3:9c:d0:2e:4e:4d:64:95:27:
                    9c:24:60:7c:b1:3f:35:ed:43:ca:65:fc:a3:c9:3c:
                    03:89:33:d5:27:d5:ea:35:da:3e:17:4d:5c:9b:bb:
                    0e:ea:19:08:e6:db:5f:9a:3c:ba:93:86:ba:41:75:
                    73:bf:84:57:d9:3d:8a:76:82:a1:0a:98:ad:0c:37:
                    e6:5f:34:8b:a9:d6:9b:45:3e:79:bf:b8:3b:b1:2c:
                    09:35:9f:4b:70:17:34:54:19:a3:f3:54:f5:e4:3e:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:1F:9B:3E:76:69:44:65:BB:E1:9C:45:D9:2A:33:96:BE:8E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d96a2fde-4ef6-3baf-8d06-4af5b7803875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:15:8a:7a:31:1c:19:20:e4:f2:55:d3:50:2e:ea:5c:ad:
         77:83:e4:31:32:b3:65:1a:56:8a:2e:48:69:b0:d8:98:5d:1a:
         0e:03:19:7a:9a:af:0b:6d:1c:44:0a:83:96:21:65:aa:1f:10:
         4b:18:91:7e:24:6d:63:04:8f:86:ae:d0:96:4b:95:11:38:bd:
         53:fb:57:a4:f0:24:10:77:e7:a2:cb:99:30:c9:25:48:b0:e6:
         11:75:9b:5b:41:d2:7b:45:66:5a:a0:41:1a:55:81:3b:ae:22:
         59:d4:83:f7:fe:27:76:1a:cc:bf:4f:01:94:df:6b:3f:f0:43:
         07:64:d0:b3:8e:9b:0a:78:b6:8c:2e:ce:9b:b6:8a:71:ec:9c:
         a8:63:98:c6:bc:2c:13:e9:91:2f:e2:dd:72:87:4c:ac:ee:21:
         8c:3d:73:33:d6:b2:f3:9e:9e:44:07:68:71:d1:8d:fc:50:13:
         e0:f5:6e:11:b5:bd:c1:79:fe:dc:6f:5d:7a:22:be:73:eb:d3:
         91:f9:00:88:71:14:90:87:e7:ca:f5:4a:0a:65:1e:4a:64:5f:
         c0:08:ad:3b:e5:47:7a:9c:76:0b:17:29:a5:cd:f6:6c:cd:c4:
         8e:7e:a7:01:34:21:82:bd:9d:85:cb:eb:3a:1b:86:2d:8c:b7:
         7e:2b:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:49 2025 by rpki-client