Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa
File:                     f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa (raw, json)
Hash identifier:          rUTbxq/E6bwQA69ptvyUtvx5KufHnHxq59zGIqvVexY=
Subject key identifier:   F7:EF:E5:08:D3:37:61:74:87:AC:FF:8A:A8:56:0B:C9:25:57:C1:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371E0A44CA9FB3DF60B480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1e:0a:44:ca:9f:b3:df:60:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=13f4af49-b741-42fe-8e6e-c1512f9be4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:b2:9d:fc:d6:6f:6a:46:1f:64:4b:90:6c:
                    bb:0b:7c:23:30:71:9a:e2:66:60:58:3d:46:06:2e:
                    c1:05:00:1b:24:17:fb:2f:f2:5b:a3:c1:cb:75:4b:
                    f4:5d:8f:2a:bf:cf:09:cc:38:be:32:6a:e3:ea:c3:
                    df:a7:51:d7:e4:19:0f:cf:c3:72:9d:42:5e:d8:b6:
                    a1:e3:ef:b3:65:70:35:75:dc:81:8f:cd:c7:0b:1b:
                    19:29:32:de:cd:39:2b:ed:cb:d4:32:ae:cc:a5:04:
                    a9:0d:19:bf:38:01:0f:de:33:71:77:69:b8:86:a1:
                    46:b6:44:98:56:a9:49:bf:bf:a9:a6:b2:da:18:33:
                    5e:bd:58:37:5a:0e:87:76:76:40:f5:02:09:d3:05:
                    a0:ac:ce:53:ac:d4:09:bb:a0:a6:49:d1:25:ec:46:
                    f8:1d:8d:f2:96:da:58:4b:b3:09:30:f8:ae:17:ff:
                    29:11:e0:21:97:4a:b2:91:0a:3f:5a:14:eb:4c:01:
                    8d:55:26:22:04:2f:c6:1e:81:0d:37:5f:50:bc:8c:
                    af:e7:71:c3:5b:6a:88:e4:c5:aa:e4:ac:f6:b5:32:
                    96:0a:6b:5e:6a:20:44:8e:ab:90:b5:a3:e5:53:c2:
                    6c:99:8c:13:a3:24:5b:48:fe:ea:1c:fd:5c:cd:ba:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:E5:08:D3:37:61:74:87:AC:FF:8A:A8:56:0B:C9:25:57:C1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53b8b59-2e57-3e97-ab0c-11ad75ed94f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:d1:22:5e:70:6a:a7:66:a8:b8:d6:24:35:d4:0d:7f:b4:
         37:cf:48:40:3b:2f:ed:74:ef:6b:4b:7e:bc:08:68:1c:32:23:
         5c:e8:10:43:e8:8f:6e:f7:87:25:c3:52:1d:f1:09:d8:b9:5e:
         71:17:15:c3:01:e7:66:4d:28:cc:ca:0d:b0:aa:d2:be:b6:4c:
         87:be:17:d7:19:7a:0c:3f:c0:8a:39:4c:39:83:52:b3:a5:fb:
         1c:c3:4a:f8:a4:83:07:98:95:22:d6:23:45:8c:bd:dc:e1:f3:
         82:45:43:aa:a2:53:88:62:6d:c0:ad:55:20:14:74:75:0a:cb:
         e4:4b:c1:48:34:ae:8e:a1:a5:34:bd:59:01:d0:4e:80:36:21:
         a8:93:6e:c7:56:68:dc:d6:52:92:a0:cd:bf:be:62:50:ff:da:
         95:97:73:cf:e1:9d:32:e6:18:2b:c3:e0:62:09:35:ab:f7:d2:
         ab:a7:dc:ed:9b:43:99:70:10:15:0b:c6:8b:38:aa:73:d3:68:
         f6:ff:06:e7:4f:f7:a6:9b:23:14:46:d4:5a:ec:28:36:df:09:
         84:8d:9c:8c:82:48:db:5d:29:29:e2:c8:a2:46:73:ef:8f:78:
         41:72:b5:c1:ad:b6:8a:bd:dd:93:00:51:89:cf:2f:a1:d4:a1:
         b7:c7:b5:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNx4KRMqfs99gtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MTNmNGFmNDktYjc0MS00MmZlLThlNmUtYzE1MTJmOWJlNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJCynfzWb2pGH2RLkGy7C3wjMHGa4mZgWD1G
Bi7BBQAbJBf7L/Jbo8HLdUv0XY8qv88JzDi+Mmrj6sPfp1HX5BkPz8NynUJe2Lah
4++zZXA1ddyBj83HCxsZKTLezTkr7cvUMq7MpQSpDRm/OAEP3jNxd2m4hqFGtkSY
VqlJv7+pprLaGDNevVg3Wg6HdnZA9QIJ0wWgrM5TrNQJu6CmSdEl7Eb4HY3yltpY
S7MJMPiuF/8pEeAhl0qykQo/WhTrTAGNVSYiBC/GHoENN19QvIyv53HDW2qI5MWq
5Kz2tTKWCmteaiBEjquQtaPlU8JsmYwToyRbSP7qHP1czboIiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPfv5QjTN2F0h6z/iqhWC8klV8FIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjUzYjhiNTktMmU1Ny0z
ZTk3LWFiMGMtMTFhZDc1ZWQ5NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3E0SJecGqnZqi41iQ11A1/tDfPSEA7L+1072tLfrwIaBwyI1zo
EEPoj273hyXDUh3xCdi5XnEXFcMB52ZNKMzKDbCq0r62TIe+F9cZegw/wIo5TDmD
UrOl+xzDSvikgweYlSLWI0WMvdzh84JFQ6qiU4hibcCtVSAUdHUKy+RLwUg0ro6h
pTS9WQHQToA2IaiTbsdWaNzWUpKgzb++YlD/2pWXc8/hnTLmGCvD4GIJNav30qun
3O2bQ5lwEBULxos4qnPTaPb/BudP96abIxRG1FrsKDbfCYSNnIyCSNtdKSniyKJG
c++PeEFytcGttoq93ZMAUYnPL6HUobfHtbc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:34 2025 by rpki-client