Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe1f9798-b1a6-346b-9bdb-337f979cff65.roa
File:                     fe1f9798-b1a6-346b-9bdb-337f979cff65.roa (raw, json)
Hash identifier:          2AVC+bzG4BcSuGN5fhuw6ojqOwadalNjswgETzHuz20=
Subject key identifier:   AC:BE:22:69:BC:A2:2F:40:92:6E:D6:7E:55:73:2F:BB:E5:CC:91:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5141F225E176A14105A8F500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe1f9798-b1a6-346b-9bdb-337f979cff65.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1010:b220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f2:25:e1:76:a1:41:05:a8:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=de85ad05-d6d5-4510-b9d3-d3cac08ff062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:71:07:3e:fd:f3:63:f9:f6:c7:78:1d:2e:
                    e9:cc:20:f0:3d:5d:63:3b:69:1a:3f:d6:f1:41:87:
                    00:b4:bb:1b:ff:67:78:33:d7:d7:dd:ed:6e:c3:df:
                    49:db:38:48:0a:d0:98:05:ee:b9:1d:7b:7e:85:f8:
                    c6:d8:93:13:ec:e5:4b:7c:73:26:9c:cd:48:ab:62:
                    10:6d:6e:95:dc:28:b0:36:f0:1b:13:9f:b1:30:c1:
                    e6:c3:57:68:22:7b:e5:72:41:ad:d6:dd:0b:95:c2:
                    7f:e8:3e:ae:4c:10:a3:d8:12:2a:9b:21:f1:8b:d5:
                    72:f6:a9:15:c5:7b:74:94:da:5f:d3:8b:99:2c:1b:
                    ec:4e:ad:6a:75:41:09:f6:03:59:4a:54:19:13:02:
                    24:07:9c:7c:be:3d:71:0f:36:23:8f:e3:68:e7:b0:
                    b2:fb:59:2b:a4:57:19:ec:b5:d2:43:ba:94:89:88:
                    a9:46:91:8c:da:10:21:0f:8d:1b:cd:a7:a3:d5:ea:
                    0c:8b:0a:3d:c0:6e:82:15:f5:aa:f6:17:08:61:50:
                    df:5b:99:6a:3a:3c:eb:38:4a:e1:f6:70:a4:78:db:
                    94:f6:38:21:9d:ac:67:7a:55:6d:70:a1:55:e1:e4:
                    75:aa:80:a5:f3:6d:0e:2b:cc:de:70:30:08:fc:52:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BE:22:69:BC:A2:2F:40:92:6E:D6:7E:55:73:2F:BB:E5:CC:91:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe1f9798-b1a6-346b-9bdb-337f979cff65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:b7:c6:13:35:df:5d:48:df:65:05:50:6a:1c:6f:0d:4e:
         ce:75:d0:58:15:80:c9:76:bb:9b:1b:cc:62:0f:ef:9a:bd:f3:
         d3:d4:73:98:ba:44:50:5d:85:ea:e6:a1:1f:6d:04:17:17:ac:
         83:2c:b5:22:19:16:62:9e:ad:40:9d:c4:f6:6b:f6:dc:16:0b:
         b0:4a:d1:25:6d:42:ac:13:7a:e0:f6:b3:4c:72:d4:3a:51:df:
         92:16:62:80:cf:14:11:23:d0:96:36:f5:46:0c:25:74:ca:ac:
         ee:6b:a6:ab:cd:c3:d9:48:c1:69:99:a3:95:e5:b5:9e:7e:5c:
         5a:24:a4:33:aa:44:56:e9:9a:c0:ae:ad:9c:04:21:06:a5:84:
         54:0f:5a:5b:df:c5:71:e8:1a:f1:8a:79:1e:83:e4:16:81:01:
         5d:e0:19:ea:a9:ec:b3:ea:79:54:55:fc:5c:15:56:ab:9c:73:
         0b:dc:a2:42:22:5e:92:f2:5b:79:e2:48:ea:bb:49:16:b1:3d:
         b2:96:87:a6:a0:a9:ad:8b:04:e8:a9:06:9a:dc:26:55:e1:b4:
         57:ac:9e:2b:44:5e:97:c4:56:a4:90:e5:d7:89:d2:b2:c3:e5:
         fa:19:05:38:52:fb:f5:ac:7c:5c:85:74:36:70:9d:a8:24:45:
         14:65:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:13 2025 by rpki-client