Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa
File:                     eac98e2d-bc39-3897-9e95-0317f5752964.roa (raw, json)
Hash identifier:          +53kpxiB/2qAOhQhpz2usgcB8zfj4JSxj18sgJGW/C0=
Subject key identifier:   48:89:79:D4:3B:1A:B9:E9:83:15:B0:71:52:9C:69:2F:26:BF:2D:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36E677E811389C1DFB5480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1002:b058::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e6:77:e8:11:38:9c:1d:fb:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=f7be59a8-503d-4642-84ac-ffd30a254b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:d0:c9:34:63:93:62:91:e8:8e:d2:db:49:
                    59:5f:6e:eb:36:87:b9:42:67:40:08:10:ba:97:9d:
                    76:5a:02:e2:d8:a9:37:f7:3a:03:9e:b1:77:30:f5:
                    23:98:6e:b5:cd:54:54:61:ef:58:1d:4a:d9:71:90:
                    d6:3b:64:25:51:46:9f:19:1d:40:69:d5:25:c4:be:
                    21:92:59:54:f3:28:07:e7:a5:fb:df:8e:7e:51:88:
                    33:56:35:48:c7:9a:6d:27:19:29:29:b5:71:77:4b:
                    2c:b7:0b:e6:07:26:20:26:36:8f:1a:85:7c:c5:6d:
                    38:75:f5:2e:c1:4a:68:0c:ad:f8:b6:5a:d7:34:a0:
                    cf:72:52:3d:67:ec:31:63:1f:9b:b6:42:f8:47:44:
                    ec:d0:99:01:73:f2:eb:9e:2a:a0:b4:5c:87:72:6b:
                    2a:e5:58:68:7b:d7:9f:b3:c0:5a:f9:00:8c:39:14:
                    ec:7a:f8:78:a9:cc:cc:29:22:df:5d:28:4c:8c:f2:
                    74:d0:1d:38:ea:95:a8:c7:7c:0e:2a:96:6f:b3:46:
                    cd:87:c9:19:f7:12:ef:18:c6:3e:79:e0:5c:14:c2:
                    26:33:87:6e:51:be:33:c7:93:7d:95:25:96:72:16:
                    42:5a:a6:97:bf:d0:2d:e7:11:d7:22:76:5c:c8:5d:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:89:79:D4:3B:1A:B9:E9:83:15:B0:71:52:9C:69:2F:26:BF:2D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac98e2d-bc39-3897-9e95-0317f5752964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b058::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:b1:18:3a:cf:c3:83:d2:83:87:34:38:69:88:e8:f7:cf:
         f0:4c:c9:e4:39:ca:45:a7:6e:5d:69:eb:9d:23:fc:b1:c0:32:
         ef:4d:6f:74:6e:d9:1b:c2:f9:d4:a5:73:74:1b:00:4f:9c:75:
         87:94:a5:09:11:a0:b6:de:5d:0e:e5:4a:50:83:2b:81:15:36:
         5b:6f:8b:17:9a:ba:15:6e:07:dd:6c:b8:f3:cd:61:cc:04:63:
         40:bc:f1:b4:31:1a:e4:fa:75:27:c3:86:c8:26:0d:8a:1c:6c:
         4b:31:34:69:7f:d0:11:99:33:bc:6a:0d:0a:21:df:95:8c:04:
         c8:da:59:91:9c:a5:81:6b:16:39:dc:1c:d0:37:aa:9c:b1:9b:
         34:f3:84:a0:26:aa:4b:fd:02:cb:19:e4:6e:05:2b:38:49:ef:
         67:64:f5:0a:68:34:2f:f8:a6:35:a9:99:fa:28:bd:e3:9c:21:
         ef:0a:09:e7:30:a7:3f:fb:8c:40:39:ea:c9:f5:18:46:98:a3:
         14:1c:2c:6b:8a:f7:69:bc:43:33:e2:74:4a:77:76:ea:f0:ca:
         c1:df:76:e2:40:a2:84:4b:1a:c8:ca:31:99:1f:b5:9f:eb:8c:
         75:ac:d9:c3:4a:53:82:6a:d9:9e:dd:be:00:43:8d:28:01:61:
         49:34:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:02 2025 by rpki-client