Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716da66-bea3-32b1-8390-269f7f930deb.roa
File:                     f716da66-bea3-32b1-8390-269f7f930deb.roa (raw, json)
Hash identifier:          epZZQzDvmk4sZ9GQjM+netD8lhMkSEPs3IerZ7c4KGc=
Subject key identifier:   3E:72:D0:9E:B2:41:52:7E:AD:9B:59:2B:77:E4:DD:D5:B1:9A:A7:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20A12C089831C14AFA540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716da66-bea3-32b1-8390-269f7f930deb.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1016:a018::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0a:12:c0:89:83:1c:14:af:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=17329e03-2e45-4d58-a86f-e2c4afed7d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:c2:1e:4e:5e:63:16:a6:19:b1:c7:c7:29:
                    45:53:b5:77:47:92:63:f1:ed:dd:36:08:bb:9c:1f:
                    51:34:96:12:48:0c:ca:12:8d:ce:41:64:ec:e5:83:
                    a6:5d:6d:d1:ac:f6:c6:fe:71:01:fa:e1:51:28:da:
                    60:90:80:0e:7d:b8:0e:a9:32:0d:1d:69:cb:44:aa:
                    c0:98:93:af:1e:dd:01:ae:a7:6f:ad:d6:75:e8:ef:
                    a9:24:09:46:2c:57:70:c8:40:16:0c:5e:c3:6b:a5:
                    31:2d:bd:48:ec:b3:b6:84:7e:2c:6f:d0:98:cc:ed:
                    40:27:f7:be:e4:15:1d:59:7b:54:c7:d9:6e:e3:92:
                    1f:76:a0:fe:da:24:45:28:e9:28:e2:6e:da:2a:21:
                    7b:13:29:4e:08:46:23:40:b8:c5:85:b8:73:c1:52:
                    e5:13:ee:42:12:e2:0b:60:35:9c:0e:92:bc:d7:d3:
                    a8:a7:f4:19:14:fa:d2:8f:6c:57:33:7d:51:ae:0a:
                    b3:f0:4f:7a:ff:55:a5:f6:56:ec:a7:1d:a3:c9:1d:
                    65:02:ef:81:13:78:be:6b:7b:08:d8:94:7c:8a:5e:
                    9b:7b:cc:f3:d3:8e:0d:63:fc:83:30:37:97:7f:a8:
                    9c:96:96:ec:16:d8:5f:12:19:89:e7:24:f6:58:d2:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:72:D0:9E:B2:41:52:7E:AD:9B:59:2B:77:E4:DD:D5:B1:9A:A7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716da66-bea3-32b1-8390-269f7f930deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:a018::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:8c:a8:31:87:c3:6b:54:8c:1e:02:1d:66:14:1b:58:30:
         54:93:89:29:d5:c8:15:52:65:86:81:4e:d8:27:bb:ff:6e:10:
         dd:d9:9f:b3:29:c9:1d:3b:8c:65:cc:07:bb:47:14:19:3e:49:
         1c:0b:aa:f0:0f:36:38:52:77:d3:9c:29:9d:64:a4:28:6e:31:
         6a:e2:d2:56:07:c8:87:50:6d:16:2b:bf:96:24:a2:35:55:6a:
         5d:35:41:46:fe:6a:9d:45:66:26:a2:c7:b5:a3:bc:58:03:95:
         ea:b0:a4:9f:60:ba:d3:60:fc:bb:c4:0b:90:77:3b:32:99:52:
         9a:2d:c2:71:86:db:77:ed:c1:39:6e:04:04:56:e0:6c:3e:f4:
         dc:2d:25:31:4c:5c:6a:43:b6:32:4f:d1:b1:da:0c:60:9e:20:
         f7:6b:c2:65:45:f8:f6:03:32:0b:b2:f7:89:d9:96:b8:c8:6b:
         1d:64:28:4a:a1:49:28:09:c0:d0:52:ea:19:6d:67:d1:68:12:
         e9:98:30:0e:2a:a8:d3:55:e4:06:78:f2:5e:bc:be:97:77:67:
         dc:f0:a2:52:60:96:95:9b:ab:53:a1:05:e0:8f:76:5a:e7:f0:
         a0:f5:44:78:0a:8a:bb:c3:d3:41:23:1c:1d:f4:7f:77:f8:80:
         2a:9e:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:18 2025 by rpki-client