Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecac3487-5f84-3b9d-a834-a14e406ecf35.roa
File:                     ecac3487-5f84-3b9d-a834-a14e406ecf35.roa (raw, json)
Hash identifier:          n7mkQX++6i6KEX1U3SL6wS4AHX0CXt3ZG3mkvs+eJzM=
Subject key identifier:   11:22:EF:8F:FB:A6:99:C2:4F:F7:79:E0:9D:09:C3:B5:DB:9C:67:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F00A2E1F296A5144EC20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecac3487-5f84-3b9d-a834-a14e406ecf35.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f0:0a:2e:1f:29:6a:51:44:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=593f4ea3-f1da-4fed-a291-644ea3c39025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:15:1a:c9:26:a8:d2:9d:1f:5c:2e:cb:4d:
                    5a:82:83:cb:30:14:d0:7b:b7:54:fc:12:99:dc:2c:
                    c0:1e:fd:02:15:4e:2d:4c:e6:e0:1f:e4:68:73:6a:
                    12:34:81:8c:fa:aa:05:97:af:d1:6c:87:f8:03:79:
                    95:d8:59:1c:ae:6c:2b:80:bc:da:41:0b:d5:bb:42:
                    62:04:3b:24:a9:15:59:d4:53:5b:26:3c:c4:fc:f6:
                    b7:7b:33:e4:f9:7f:23:f3:1e:76:8f:5c:e9:05:8c:
                    58:f1:60:c2:e4:2c:5f:7a:78:02:a2:a1:55:ff:21:
                    cb:ca:23:d4:f7:5c:cc:97:2d:a9:50:ba:97:2f:7e:
                    7b:50:86:50:ad:1b:46:44:94:e0:70:dc:67:9e:fd:
                    b7:42:12:72:57:2a:5d:56:b9:dd:ad:20:c2:24:18:
                    0e:18:54:52:97:e6:2e:87:73:bb:c1:85:7b:0f:82:
                    9b:5d:e4:46:54:d8:e5:90:35:1b:72:05:1c:d6:71:
                    b4:e3:6b:14:30:93:14:5e:d5:a8:ff:72:d6:41:59:
                    40:78:59:57:c0:0a:7b:da:72:a8:b8:22:ca:73:e1:
                    22:28:8b:89:bb:f2:b7:24:14:e7:55:af:05:af:7c:
                    73:88:31:eb:2a:18:4f:ae:78:1f:90:5b:af:b1:11:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:EF:8F:FB:A6:99:C2:4F:F7:79:E0:9D:09:C3:B5:DB:9C:67:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecac3487-5f84-3b9d-a834-a14e406ecf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:59:8c:53:0c:9e:db:80:18:11:c4:71:51:d1:7b:21:90:a4:
         ac:17:38:31:31:32:d3:e1:0a:44:28:0f:74:50:d5:f5:15:b3:
         3c:ec:44:ae:7a:df:e1:a9:1a:4d:14:5c:7a:35:16:1a:62:86:
         df:ff:d4:2e:13:bd:71:05:12:e3:17:68:14:49:7f:e3:9f:de:
         e0:c9:ad:ea:f8:a2:4e:d9:0c:de:a2:d8:88:a1:0a:00:b3:4c:
         9c:06:10:22:99:c1:a0:6e:0e:b1:75:e5:c3:46:af:33:a6:22:
         54:78:4b:ee:37:c7:1b:d2:f5:42:9a:2b:32:5c:3a:dc:8a:7f:
         df:ea:8c:f7:b1:75:63:45:d3:8e:26:11:bc:3e:2a:2e:93:b1:
         65:d8:c4:fc:70:10:2d:aa:a3:c3:5a:94:aa:8b:8a:31:36:a7:
         84:e7:9b:e5:3d:bc:63:04:69:d5:93:ad:e3:00:11:08:24:8e:
         6b:78:9f:71:07:4a:a4:e0:61:7c:8d:35:31:c7:5a:1a:53:e7:
         fb:4a:8b:87:d9:e5:04:76:75:72:4e:41:a5:1b:16:e0:c7:1e:
         64:72:a7:68:71:4f:dc:0c:96:8c:95:5e:b5:05:7d:1d:6f:d3:
         e9:f8:13:88:2a:9a:b5:2f:93:b5:4b:e0:5f:75:e0:ca:d9:93:
         7c:ec:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:21 2025 by rpki-client