Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa
File:                     0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa (raw, json)
Hash identifier:          ISsq+wzNt4EZtQgo+LoY/rfgrFe4ktEYsAc1tDYnKS8=
Subject key identifier:   7B:6C:6B:B6:2B:06:3A:D4:8D:82:B5:77:C3:64:92:7B:1A:CF:C3:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AE94EF28B3480AF61A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b180::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ae:94:ef:28:b3:48:0a:f6:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=e6e9eabe-ea00-45b5-b4bd-3f13599957b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:e6:7c:59:4b:b0:b6:18:37:34:1d:f5:5a:
                    6d:51:3c:cf:eb:09:6b:cd:e1:0d:89:95:c1:dd:97:
                    32:fc:2f:2c:d7:be:2e:0e:6c:2d:92:3c:de:73:96:
                    66:f8:c1:df:4c:0d:77:48:1d:4c:b1:8c:e4:2c:c1:
                    28:64:25:51:d3:29:db:70:ce:66:d1:75:86:1a:0c:
                    ac:0a:ea:3f:46:a7:d5:2a:31:33:64:db:4d:6f:c8:
                    14:04:8e:fa:b5:42:01:d6:44:8a:40:d0:0c:d9:1a:
                    88:32:ad:26:92:d3:d2:db:c4:21:23:a1:c4:05:84:
                    a7:99:fe:9a:73:f6:2c:5c:0d:dd:14:b2:ed:cc:26:
                    d4:21:44:a0:44:51:91:9f:1f:46:ac:88:8c:16:26:
                    69:6c:b1:2d:51:05:3e:ad:75:59:af:4b:ef:b5:41:
                    1c:f0:3f:bd:87:1f:eb:aa:79:12:4c:d4:d3:09:85:
                    af:69:6a:4d:2b:92:57:12:c7:db:4c:6e:57:45:eb:
                    25:f6:64:44:75:d6:bc:d2:f8:68:90:fe:b1:0b:0b:
                    bb:19:1b:6f:f1:91:5a:25:fa:ec:f8:13:35:a5:3f:
                    b2:81:4b:1f:9e:76:7e:fc:a6:a7:7c:9b:f6:9d:80:
                    db:9c:7d:03:36:34:a6:0e:0f:85:cf:49:dd:13:35:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:6B:B6:2B:06:3A:D4:8D:82:B5:77:C3:64:92:7B:1A:CF:C3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:25:96:9f:ec:b4:59:0f:09:89:af:75:b9:a2:fc:45:4b:
         72:3f:ef:10:06:b6:73:67:18:87:15:8e:2d:e0:d5:02:63:b7:
         5e:48:e8:88:2f:eb:be:ff:a6:0a:12:30:e0:65:29:63:fb:c1:
         5f:48:fa:ef:1b:63:67:49:9e:e2:82:68:2a:35:41:e2:43:68:
         13:5d:23:e5:72:f9:23:c3:26:6c:d9:3a:9b:5e:1b:1b:99:19:
         5c:1e:04:a2:bd:61:a7:fa:e4:45:e7:59:ec:28:1a:3f:60:8f:
         db:d9:8a:50:ed:69:e1:19:bb:b9:68:d8:ef:8a:ae:f9:4a:77:
         f5:f9:c5:d0:9e:20:c4:a0:0b:8a:a5:40:b8:ea:a7:91:ed:08:
         9c:12:27:ec:18:b4:0e:5e:4e:98:3b:64:bb:a3:c6:28:d0:ff:
         f8:08:7d:da:0c:b9:9e:e6:e5:91:92:07:b2:b8:4e:0b:21:07:
         a5:20:d3:7d:01:c0:e3:ee:49:7b:ef:54:d8:3a:e0:c8:2e:e2:
         dc:8e:76:f8:57:77:20:2e:0a:48:a0:02:4b:84:be:32:c7:61:
         13:df:76:83:49:b3:98:74:65:92:22:b7:5b:a1:d0:e7:43:60:
         c9:66:9d:ba:7d:45:86:64:6e:e7:e7:8a:c3:a8:d4:e7:14:7a:
         85:07:65:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikK6U7yizSAr2GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZTZlOWVhYmUtZWEwMC00NWI1LWI0YmQtM2YxMzU5OTk1N2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNvmfFlLsLYYNzQd9VptUTzP6wlrzeENiZXB
3Zcy/C8s174uDmwtkjzec5Zm+MHfTA13SB1MsYzkLMEoZCVR0ynbcM5m0XWGGgys
Cuo/RqfVKjEzZNtNb8gUBI76tUIB1kSKQNAM2RqIMq0mktPS28QhI6HEBYSnmf6a
c/YsXA3dFLLtzCbUIUSgRFGRnx9GrIiMFiZpbLEtUQU+rXVZr0vvtUEc8D+9hx/r
qnkSTNTTCYWvaWpNK5JXEsfbTG5XResl9mREdda80vhokP6xCwu7GRtv8ZFaJfrs
+BM1pT+ygUsfnnZ+/KanfJv2nYDbnH0DNjSmDg+Fz0ndEzWdmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHtsa7YrBjrUjYK1d8Nkknsaz8O5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDcyNTU5OWEtNTI5NS0z
ZGEyLThhNmUtY2E2ODJkM2ZmOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDrGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqtJZaf7LRZDwmJr3W5ovxFS3I/7xAGtnNnGIcVji3g1QJjt15I
6Igv677/pgoSMOBlKWP7wV9I+u8bY2dJnuKCaCo1QeJDaBNdI+Vy+SPDJmzZOpte
GxuZGVweBKK9Yaf65EXnWewoGj9gj9vZilDtaeEZu7lo2O+KrvlKd/X5xdCeIMSg
C4qlQLjqp5HtCJwSJ+wYtA5eTpg7ZLujxijQ//gIfdoMuZ7m5ZGSB7K4TgshB6Ug
030BwOPuSXvvVNg64Mgu4tyOdvhXdyAuCkigAkuEvjLHYRPfdoNJs5h0ZZIit1uh
0OdDYMlmnbp9RYZkbufnisOo1OcUeoUHZSo=
-----END CERTIFICATE-----
Generated at Wed Jul 9 21:43:12 2025 by rpki-client