Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a6211b4-f2cd-347b-85f8-a9673f0fd99b.roa
File:                     2a6211b4-f2cd-347b-85f8-a9673f0fd99b.roa (raw, json)
Hash identifier:          elztTV63vzX29AATxBOCS1HYOI2Oa0pG900LfsN64NI=
Subject key identifier:   BA:D9:1A:D3:04:F7:F3:83:F3:70:F2:06:FD:3E:69:32:AD:C1:31:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1064A8CBBAA8E6CC659A34DC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a6211b4-f2cd-347b-85f8-a9673f0fd99b.roa
Signing time:             Tue 02 Sep 2025 19:23:27 +0000
ROA not before:           Tue 02 Sep 2025 19:23:27 +0000
ROA not after:            Mon 01 Dec 2025 20:23:27 +0000
asID:                     6167
IP address blocks:        2600:100d:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:64:a8:cb:ba:a8:e6:cc:65:9a:34:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  2 19:23:27 2025 GMT
            Not After : Dec  1 20:23:27 2025 GMT
        Subject: CN=9ac94731-88fa-483f-bc3e-c8fcb04d0f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:14:2d:3b:06:94:6e:3c:fb:43:f6:8e:12:
                    45:08:fe:d2:f6:8c:0e:3a:44:c0:cf:bb:ea:9c:fb:
                    85:c6:28:03:73:aa:9d:e9:81:19:5e:08:7e:99:28:
                    88:6b:ae:98:21:eb:cc:f6:3f:3f:d3:24:6c:eb:9a:
                    48:5e:a9:8d:6b:20:09:97:28:93:be:9b:a5:a6:68:
                    54:6b:c5:fd:f4:14:6d:f4:c5:87:43:be:0c:26:e1:
                    3a:ff:d2:0a:57:37:e4:eb:2a:a2:bc:5c:13:b2:8f:
                    68:9e:86:30:33:e0:93:41:41:fd:78:65:c8:98:3c:
                    a8:e0:c5:da:bd:e9:cf:3d:02:7d:93:27:3a:eb:e0:
                    80:64:eb:90:f8:22:12:7f:3c:aa:10:5a:f6:2f:39:
                    23:25:e2:fb:65:44:11:e4:e0:5b:8e:31:0d:15:73:
                    c6:46:37:ed:64:d1:50:28:aa:68:27:c7:7b:82:7d:
                    88:71:0f:06:24:4e:16:81:6e:9a:1e:58:a1:bc:c0:
                    00:bf:55:be:3d:c3:cd:e3:b0:90:c4:1f:ba:b1:7b:
                    2c:fc:fe:2d:98:4b:28:f1:82:f6:7d:31:6c:e2:91:
                    8d:6d:84:b5:4e:3a:57:56:1d:97:6d:24:4c:fd:d7:
                    e3:61:01:73:fb:d8:1f:e3:ca:4a:36:73:f5:ee:fe:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D9:1A:D3:04:F7:F3:83:F3:70:F2:06:FD:3E:69:32:AD:C1:31:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a6211b4-f2cd-347b-85f8-a9673f0fd99b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:60:22:64:5f:77:ea:c8:f2:57:1c:32:d9:8d:68:20:0c:
         1e:f3:d7:ff:e1:9d:40:fe:52:33:10:2d:32:14:d3:80:60:2e:
         50:02:dc:e3:cd:0b:83:06:97:eb:f9:5d:92:ae:64:ca:1a:3d:
         be:c7:35:43:20:a2:2d:6c:fc:6b:02:a6:cb:66:fc:85:75:e3:
         4c:f7:e8:d3:ff:3c:e3:c5:49:c3:03:c2:fe:4e:0a:19:7f:27:
         37:13:8f:f4:16:11:f9:42:e7:2c:23:1a:ff:2b:a1:6b:97:d3:
         cd:8d:e8:fd:35:2f:00:17:2b:fa:ef:20:68:b4:28:a9:c8:13:
         cd:85:70:dc:fe:55:7b:63:63:95:bb:b5:41:54:e1:c8:b3:a3:
         a4:62:e7:70:6f:ef:74:22:ea:76:27:5d:91:88:96:58:5b:34:
         8f:68:f8:15:22:42:2b:6b:77:67:b4:c1:90:61:24:de:2d:0b:
         9d:c4:97:98:5b:44:19:d0:b2:3a:17:b7:c6:4b:e0:db:35:b3:
         3f:a9:9c:4c:e8:84:d8:0b:1b:4e:f2:77:72:ed:c0:49:60:30:
         4e:01:ed:78:3e:f4:7c:6e:f1:21:56:6b:76:e0:9b:01:b3:13:
         67:89:0f:67:46:03:80:b4:f5:35:f2:5a:af:61:06:8c:4e:5b:
         e4:54:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 17:54:07 2025 by rpki-client