Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa
File:                     02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa (raw, json)
Hash identifier:          9LIxh8DXnCR9ynWeRIW5MnPdjCX61Kyl6NhDaFsYIDg=
Subject key identifier:   DC:CF:72:C1:3A:96:CA:EE:B9:37:12:73:51:EF:94:AC:94:6A:A8:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C547B7483DFB6D297A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c5:47:b7:48:3d:fb:6d:29:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=951cfd16-fa96-48f6-a3ab-b507c456a53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:05:e9:37:84:e9:be:66:e4:85:67:50:ba:
                    a0:e2:cb:bf:fe:07:2a:24:a2:a5:2d:df:65:ef:0f:
                    6f:0c:2e:e7:48:f9:2a:5f:70:20:45:24:ac:26:d5:
                    62:92:df:d0:3f:a3:c5:41:f2:0a:21:d2:2d:2e:53:
                    20:d8:70:2e:de:03:6f:9a:65:e8:ae:be:43:f0:79:
                    22:6f:56:74:71:90:26:5b:77:0b:8c:55:43:1c:44:
                    dd:6a:c4:da:b4:23:bc:97:ea:69:ba:43:ff:fa:f9:
                    68:9e:32:8a:b5:9d:10:7f:64:ce:fe:b3:5f:75:a3:
                    c5:08:09:bd:06:eb:d5:8c:c1:50:58:d4:4f:52:16:
                    f4:2a:8c:cc:37:ba:c1:e5:ef:9a:ca:02:b1:e8:d8:
                    2f:9f:70:4f:8a:87:2b:b2:ec:89:be:0b:1d:9e:2b:
                    67:70:05:27:d7:76:fe:d1:46:b9:4e:b9:d7:17:68:
                    54:e7:b9:ad:8e:e1:1d:67:70:58:ba:8e:20:0f:06:
                    31:63:47:b5:c3:b0:39:65:80:ae:58:e7:00:b8:62:
                    45:6b:dd:0d:b8:ca:d9:bb:2a:dd:b1:20:22:9a:5a:
                    b2:a6:6f:5a:da:c7:a0:5d:dc:92:fb:41:59:83:1b:
                    54:b0:8d:5b:26:4d:7c:e5:96:75:d5:6d:8c:db:b7:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:72:C1:3A:96:CA:EE:B9:37:12:73:51:EF:94:AC:94:6A:A8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:55:84:82:89:84:a8:64:f4:37:d1:8c:9b:e5:f8:4e:45:
         8a:06:d4:9f:03:bd:14:3d:ea:77:08:e7:9b:39:a8:40:c5:d8:
         ac:6b:ad:e0:b2:79:4b:14:2d:89:03:75:a7:f3:04:cd:6c:ad:
         d4:13:2f:bd:e4:82:81:2e:6c:7b:ba:6c:0a:cf:3a:d6:7a:95:
         eb:e4:d5:60:69:cb:36:f3:4b:63:4d:8c:0b:c1:2d:ab:39:51:
         53:e0:ad:94:6a:f1:a6:36:d1:69:1c:d1:a9:ac:a8:f7:36:1e:
         b0:71:09:17:7b:7b:d8:9c:f8:07:2d:c7:c7:f1:31:17:d7:19:
         03:f1:a5:f8:56:b8:02:7b:da:4c:96:f8:fe:f0:e7:48:36:59:
         22:bf:3c:4b:70:0c:99:6e:2a:9d:59:cd:c2:8d:d1:55:9b:70:
         00:9d:8a:e2:53:e9:ba:c9:a9:0d:9e:df:38:01:57:7f:28:33:
         9c:94:84:32:6f:cf:52:61:fe:d9:dd:fc:14:1f:58:55:23:40:
         2d:da:60:e6:1b:8e:af:13:26:99:38:c3:c9:cb:0b:f5:89:12:
         03:15:85:23:ec:4e:fa:85:28:7c:24:f3:e8:6e:d3:9e:86:75:
         4a:03:ca:33:08:f6:34:9d:5f:71:bd:fa:0e:df:ae:b8:a1:ff:
         a2:c2:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:58:20 2025 by rpki-client