Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa
File:                     e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa (raw, json)
Hash identifier:          uwUVTB39T/tcZSJdGR0V0baD6f6ZAYvxxPXYWC+Of+w=
Subject key identifier:   C6:47:EA:96:42:4E:E4:9C:38:86:C2:6C:A1:7D:28:C4:6F:8D:42:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117632559F93C8E4BADF20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:b0ae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:76:32:55:9f:93:c8:e4:ba:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=b5a3b3b3-5fa8-46c1-bdc6-6a285f4c2739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:c0:98:57:af:56:e6:42:da:77:14:d5:4a:
                    8c:51:29:23:76:aa:3a:0e:0c:b2:83:f3:81:f6:58:
                    60:e3:dd:21:41:97:fd:28:38:a7:65:d7:5e:23:ec:
                    95:d8:f1:77:a5:18:e4:44:58:77:57:ad:67:f2:f9:
                    7e:84:e8:11:43:86:50:52:90:62:85:ba:81:5c:0c:
                    75:3b:fa:f4:3a:dc:39:11:a3:c3:2f:a6:c4:7c:56:
                    3e:e0:89:fd:d7:56:30:19:df:4d:b3:85:1c:a1:8a:
                    5d:98:87:f8:de:da:ab:b6:f7:34:e8:e3:87:a6:8d:
                    2f:03:2f:de:72:09:80:aa:87:97:60:bd:51:87:09:
                    93:af:d0:e4:a3:1f:94:e5:22:4b:51:64:75:21:28:
                    44:72:35:e6:39:a0:d8:39:42:6d:2d:c9:c2:c4:45:
                    02:4f:e0:76:e2:19:78:d5:77:b4:3d:b0:60:3e:47:
                    1a:a5:63:e9:c7:6e:61:c1:0f:cb:09:6b:b1:90:7e:
                    54:42:cd:96:c5:2d:c1:0f:36:06:60:70:36:4d:b9:
                    f0:87:4b:a8:d9:68:b3:0e:83:a4:a1:20:80:50:0d:
                    95:67:47:a7:21:2e:eb:11:42:dc:77:ce:52:58:00:
                    85:48:3b:e6:ca:c7:2c:df:f2:0f:dc:3a:16:46:20:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:EA:96:42:4E:E4:9C:38:86:C2:6C:A1:7D:28:C4:6F:8D:42:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b0ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:d8:43:eb:73:c7:0e:8a:5a:74:9b:4f:f8:6c:f4:4a:f2:
         f2:fe:fe:46:f6:86:45:90:c0:7b:c7:a2:2a:de:e0:aa:1c:74:
         e2:25:ce:fe:cc:07:af:57:34:21:f2:88:c7:f9:7f:6b:c8:3f:
         2a:59:1a:d0:72:1d:d1:17:fb:a0:93:85:1b:03:18:83:ce:a6:
         d4:15:a4:25:45:26:1c:97:96:26:cd:a0:6c:16:7d:3e:97:6a:
         49:eb:3c:d0:b4:7b:64:74:72:3e:6c:fc:dd:f8:a4:34:de:6c:
         01:e5:e6:d6:2b:8f:d9:81:77:b6:55:9f:b7:23:04:3b:76:7e:
         7b:55:07:70:2d:68:e0:48:ed:27:11:f0:57:0a:9c:7a:08:65:
         0a:c9:d8:84:7e:d4:30:0e:36:26:89:a3:6e:a9:31:13:77:c4:
         b1:64:f6:cc:db:75:15:38:ac:d6:3c:4d:97:26:24:da:e2:39:
         50:c1:fa:68:c2:a2:8d:55:e5:b1:cd:35:b1:e9:b7:31:3b:13:
         c3:88:be:38:f9:57:ca:ee:ed:24:98:1a:9b:38:f6:8f:88:df:
         54:00:b7:41:99:18:bd:27:e5:05:3a:a0:68:52:9b:de:7a:6d:
         2f:61:d1:65:de:b2:5f:7c:3c:b3:42:da:15:56:b6:14:3c:48:
         b1:90:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:29 2025 by rpki-client