Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8a93cad-0ff9-3cd8-aa17-0c4b33b48f77.roa
File:                     f8a93cad-0ff9-3cd8-aa17-0c4b33b48f77.roa (raw, json)
Hash identifier:          G8LUS6bzdm8p4gUJeVCQ2sBsmVRmRekTBLKBI9U891o=
Subject key identifier:   62:37:51:7E:BF:AC:F3:3A:CB:E3:12:0B:F5:91:01:18:5B:4B:4C:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117780CE38C711A6BADE88
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8a93cad-0ff9-3cd8-aa17-0c4b33b48f77.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1010:b1a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:77:80:ce:38:c7:11:a6:ba:de:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=b4cbe696-57a1-429b-831b-d83f9575322c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:c5:4f:62:82:e0:fb:62:e3:15:3b:63:f8:
                    a9:ee:37:aa:db:cc:e0:45:72:b7:c7:28:54:5e:f6:
                    77:49:94:a3:92:35:60:8b:6f:98:f4:da:73:f3:df:
                    9c:28:76:04:db:49:13:f5:14:5c:13:83:68:d4:d0:
                    e4:77:75:fc:1a:6e:2c:e6:93:93:5d:52:65:db:90:
                    1d:76:82:6c:66:84:ff:d8:42:47:0e:60:ec:36:ab:
                    2b:13:a4:7c:d8:a1:3d:1b:9c:38:51:6c:7e:f1:96:
                    79:a9:f9:53:87:bb:12:45:93:fd:bc:32:71:b3:0f:
                    5b:19:c5:c3:11:21:92:e2:1e:11:e0:8d:25:a3:7d:
                    cb:9a:f0:82:4f:a3:0f:f5:eb:f5:de:69:2c:f2:94:
                    23:04:ef:c0:f5:73:e5:7f:ed:c1:65:37:b7:62:a5:
                    10:f9:7f:19:e6:91:88:31:59:40:da:30:66:34:2c:
                    08:9d:67:c1:67:66:a0:f3:84:1d:3a:ae:50:17:df:
                    a9:51:58:b7:48:66:55:5e:f7:51:25:0f:89:1a:a7:
                    c4:b1:21:c9:a9:84:3e:33:5c:bb:5c:3e:e9:f8:3f:
                    f4:d6:e4:6b:19:90:09:45:86:09:77:ff:9f:32:68:
                    7e:74:c1:8e:f3:6a:02:bc:46:fd:1c:32:93:01:cd:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:51:7E:BF:AC:F3:3A:CB:E3:12:0B:F5:91:01:18:5B:4B:4C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8a93cad-0ff9-3cd8-aa17-0c4b33b48f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b1a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:ff:2e:86:ca:f2:73:97:66:f5:73:c5:e1:69:2a:89:55:
         27:4d:76:f4:2e:c2:f4:97:42:42:b2:9e:ba:35:6d:e5:5f:3d:
         da:a0:f0:4f:bb:eb:9a:19:13:84:49:b3:88:97:ba:c6:ef:7f:
         fb:3b:7e:1c:6e:8b:1e:fd:3f:0e:ac:4f:e9:7e:bc:2f:7e:2a:
         ef:e1:75:76:a0:ad:38:8d:f6:34:03:14:c2:6f:45:99:d0:27:
         aa:3d:5e:98:15:0f:43:95:0e:1d:43:f0:cd:7e:82:01:f1:c7:
         1f:aa:c0:07:d1:10:81:80:39:65:2a:a3:25:ff:a4:77:96:bf:
         56:fc:5c:75:c1:84:5e:ff:d5:2b:9f:d6:f4:d5:d6:63:15:b6:
         29:51:2f:10:61:93:dc:34:ad:a8:81:a3:64:67:c4:9e:e2:ec:
         e8:3e:aa:9c:59:db:53:ad:24:80:33:9a:b8:a9:ff:d0:ff:db:
         3d:ed:50:de:eb:21:37:97:b5:dc:e3:51:84:26:8a:4c:ee:1c:
         67:b4:32:c8:36:08:bd:fd:0b:47:f9:b4:c1:84:99:d1:bb:1d:
         d9:4d:05:d2:39:c3:61:ef:83:0d:1e:32:49:40:ea:88:1d:c5:
         b0:45:f3:7f:75:0d:b7:71:66:29:5e:4a:9c:9b:41:b5:50:0a:
         3c:27:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:39 2025 by rpki-client