Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01b8d4e1-94fe-3a04-9c02-8e9dda7a3e4e.roa
File:                     01b8d4e1-94fe-3a04-9c02-8e9dda7a3e4e.roa (raw, json)
Hash identifier:          aEMxEEocmzzq7dluF/7mYJin2mm2R2njgYJCAzPT15c=
Subject key identifier:   3E:67:EB:52:36:2F:FB:5B:35:86:E8:5F:A6:F2:33:F9:99:2B:37:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AEA4214F53A2EDA8B400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01b8d4e1-94fe-3a04-9c02-8e9dda7a3e4e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ae:a4:21:4f:53:a2:ed:a8:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a62e0804-edc6-435b-b413-e3e6ad466e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:a6:54:06:87:26:15:d7:04:78:17:d8:9b:
                    6c:f5:9f:c1:a1:fb:9f:c4:90:23:5a:35:ed:0e:79:
                    db:b5:eb:73:8a:a1:f5:fd:15:39:ff:ed:0f:33:95:
                    66:ed:d7:20:fc:84:a8:78:56:82:77:c7:2f:98:13:
                    8e:ed:0f:f2:3e:8d:9d:25:cd:79:dd:d5:4b:38:69:
                    2c:e6:a7:de:79:1d:e1:f5:ca:d0:58:03:44:9a:e1:
                    d5:02:ac:e1:02:91:48:34:3b:da:9d:b6:dc:61:53:
                    60:ba:f9:cf:aa:b3:0e:61:9e:6d:f9:cd:98:a4:3f:
                    e5:55:05:fd:c6:d7:06:76:d5:02:40:8f:1d:4e:a9:
                    c2:a0:cb:37:b9:14:da:60:f1:0c:4b:52:82:45:6f:
                    76:3a:4c:2f:6a:e2:c5:c1:a0:a0:eb:41:f5:a8:09:
                    4c:9e:2d:b7:6f:5a:40:d0:c6:39:01:a8:11:ed:ca:
                    95:90:47:af:8f:f2:4d:a6:54:a3:d0:20:7f:92:8d:
                    fb:13:ce:b2:06:e0:0f:82:90:a2:59:78:25:f3:65:
                    33:67:fe:2d:97:2a:7e:c2:98:cb:68:5d:04:73:9b:
                    05:1d:51:03:75:94:d9:82:93:8f:4a:cd:ae:14:0a:
                    04:a9:21:5c:dc:3c:1a:c1:ad:ca:16:ef:dc:58:e8:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:EB:52:36:2F:FB:5B:35:86:E8:5F:A6:F2:33:F9:99:2B:37:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01b8d4e1-94fe-3a04-9c02-8e9dda7a3e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:dd:74:a3:51:56:9a:ec:79:34:77:ae:96:47:fb:1e:d6:59:
         10:b7:5e:79:65:8c:79:28:47:b9:b6:1e:5c:d0:5b:9d:2b:fa:
         9f:19:33:fe:ae:9c:e9:20:a7:3e:3a:51:c2:1b:b2:5a:1e:e8:
         e8:7b:7e:1c:92:39:c5:13:b0:c5:02:f6:73:28:e3:f1:a5:26:
         4b:d0:33:2b:5f:7d:dd:d0:39:d1:86:04:09:a8:b7:da:7f:70:
         93:63:c5:68:08:3a:57:8a:07:e3:98:6f:fe:59:27:39:5e:34:
         2b:22:51:01:7c:7a:cd:d6:4c:a6:b1:86:e6:87:02:1c:58:d5:
         09:f2:cb:b5:ee:1c:c0:af:db:e4:1d:e2:e6:4b:6a:2f:9d:3a:
         7e:ec:b6:8c:87:0f:4d:62:e2:cd:c6:13:99:5c:e4:d3:30:4c:
         e6:bc:09:2f:bd:6d:37:dc:b4:78:2b:d2:49:ad:0e:7c:03:77:
         3b:cd:fb:d6:5a:5d:88:cc:93:66:0a:b2:a6:7a:01:0e:65:43:
         17:34:6d:75:83:8d:d4:ab:c6:e5:7e:56:80:12:66:25:37:fa:
         84:8e:ac:f0:8b:67:f3:b7:43:48:5c:04:0e:93:28:43:52:a5:
         33:fc:b0:dd:24:8f:55:af:b4:4a:a0:5d:5b:a5:93:ff:35:ee:
         92:ad:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:12:53 2025 by rpki-client