Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa
File:                     db4c3497-1529-3987-a469-9d6a8418497e.roa (raw, json)
Hash identifier:          63GMWXp8naQTwCuRtvUtzJ5m9YBf/HNitVI22F2XrYI=
Subject key identifier:   BB:50:06:13:1C:D4:99:6A:CE:1C:AF:62:9E:C4:72:B6:21:12:46:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C79080CE21D4DDF221080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:be02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:79:08:0c:e2:1d:4d:df:22:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=efa911e2-0690-4232-8b00-f4ddeb4de432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:9a:7b:86:b2:12:ed:41:34:c0:b4:0f:06:
                    ee:22:4b:d4:51:ac:7b:a5:3e:e8:59:7d:2f:f0:95:
                    42:dc:51:5f:c3:1f:22:46:b7:0d:bd:84:13:78:2d:
                    95:e0:12:b7:df:d9:56:9a:56:01:06:03:6a:7a:65:
                    ac:ce:b8:c5:62:b4:7d:70:50:21:27:5f:f4:c5:e6:
                    3e:df:9d:36:84:a2:bd:68:08:b5:a8:52:cb:7e:e4:
                    52:9a:5c:32:f5:42:8e:cf:99:28:a9:e7:74:c8:c7:
                    bb:3a:8b:d0:76:90:93:2c:8d:2b:ae:6c:21:df:6c:
                    4c:c6:29:3f:5d:61:dd:9a:e5:e1:74:4f:53:6a:07:
                    46:73:95:d2:dc:b7:81:20:52:1a:0b:77:9f:1f:08:
                    4f:1a:6e:9d:16:5a:2d:f4:0d:c3:da:4d:50:0d:c6:
                    bc:85:db:fe:bd:45:c2:7a:4a:fb:49:b2:15:a9:cd:
                    7a:e9:f2:c6:91:a9:49:02:cf:4a:cb:8e:4c:8f:79:
                    05:c2:50:c8:90:15:55:f4:ac:9e:75:bf:d7:24:5f:
                    26:e2:80:71:ff:11:9f:ba:66:62:13:06:3f:76:0f:
                    6a:df:9f:a9:75:2f:ac:88:a8:98:a0:f3:3a:b3:39:
                    e3:ff:91:32:0b:10:50:fd:cf:89:b1:3c:43:42:0f:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:06:13:1C:D4:99:6A:CE:1C:AF:62:9E:C4:72:B6:21:12:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db4c3497-1529-3987-a469-9d6a8418497e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:be02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:30:ac:5f:7d:3f:25:68:bc:de:27:7e:e1:9c:53:a9:25:
         d5:69:64:b4:fb:56:27:4a:a3:20:36:90:99:57:3c:3d:53:c4:
         53:a8:54:50:e2:58:bc:0d:ae:74:af:34:79:b1:8a:a0:6b:8a:
         48:f0:3a:2b:7d:e3:37:eb:e0:4d:49:c7:d2:39:a1:cf:d1:bc:
         fb:a6:6a:83:b0:ff:f2:df:24:fd:f0:25:16:fa:9b:ec:61:da:
         d8:ce:77:5a:42:d6:22:8d:00:e7:6c:b4:d3:a9:91:dc:b5:9c:
         6d:77:2e:83:fa:7f:5b:77:3f:17:48:c6:dd:0c:44:eb:1f:46:
         3d:ce:3f:0c:ea:75:b3:f4:36:ca:af:7c:82:f2:40:b6:54:3e:
         85:0c:be:39:62:af:52:2d:23:1b:4f:a7:a1:8c:a5:6a:a5:28:
         e0:a5:d2:b1:ae:27:3d:da:4c:e0:1b:c0:c1:04:88:9c:53:60:
         51:1f:6e:65:da:03:80:36:47:dc:4d:0e:f2:3d:e5:ac:48:de:
         15:18:ff:71:f4:8b:9e:3b:27:f3:f6:3d:14:d1:5c:88:72:08:
         03:84:66:ca:c2:e7:3e:22:22:5e:26:4a:2f:8a:59:2d:9d:52:
         f5:7f:0d:c3:a5:b8:af:31:90:c8:e9:39:7e:fc:17:90:75:ed:
         04:20:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:51 2025 by rpki-client