Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa
File:                     7970e78d-739e-3e33-96be-ce0bf01cf600.roa (raw, json)
Hash identifier:          LD6u/GxQVo8T4Jn4roCVBfuo/OEsqQ7jnzgjh5BPWlc=
Subject key identifier:   B9:16:C4:98:5E:1C:0D:DD:3A:4B:FE:C5:BD:F0:DC:F6:3E:DA:18:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C757322DA35E3A4C4380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c7:57:32:2d:a3:5e:3a:4c:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b7c28b85-f8fd-4576-a340-b82f27aca4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:d2:b3:0e:cd:33:3f:a2:c9:55:e5:ef:73:
                    0d:9a:8b:c3:d1:21:55:c5:ec:af:7b:e5:d9:4e:46:
                    ca:46:a0:8e:94:6b:03:93:fe:78:62:35:88:dd:64:
                    5e:cb:1a:cb:2e:32:f2:32:f4:0c:3f:03:d7:54:a9:
                    7c:b3:20:5c:93:f8:8c:42:6f:a1:8d:f2:45:f8:45:
                    d1:8f:1a:c6:8b:2f:d4:54:3b:76:f8:fa:40:97:a5:
                    93:9f:a5:08:a8:cd:76:00:3f:e6:fb:3d:24:6b:c0:
                    c8:f6:4a:6f:39:e6:3c:b5:37:d4:5d:93:69:ba:1b:
                    53:cb:ed:87:0a:a5:db:a2:76:01:53:2a:6e:39:6d:
                    3c:95:cf:1b:c9:d9:24:c9:8e:c6:84:a2:5a:c7:ce:
                    25:c1:0f:fc:4c:d0:f7:ee:4d:59:87:46:d5:b3:cf:
                    18:aa:83:86:5e:7c:38:f9:85:d7:5d:f7:3b:c7:f5:
                    78:14:3d:59:6c:6d:d4:e4:55:9c:df:3f:0d:1d:d8:
                    c4:81:1e:9d:b7:8f:98:ff:29:bc:79:e0:37:4d:ec:
                    6e:fd:a4:50:e2:31:5d:b6:a8:12:09:66:65:87:ae:
                    1c:0a:19:5d:4c:4f:aa:24:31:a1:8d:c2:d9:3e:93:
                    f9:2d:d0:a8:07:b7:f1:5f:ff:80:a2:db:c5:fc:e0:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:C4:98:5E:1C:0D:DD:3A:4B:FE:C5:BD:F0:DC:F6:3E:DA:18:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:05:b4:4d:5b:17:f0:2b:c5:94:56:d8:b5:dc:ab:44:09:
         7c:f0:28:18:d9:7a:72:41:22:ad:58:59:9e:18:8b:fe:2f:cb:
         0c:07:1e:04:59:10:93:83:e1:1a:f1:12:a9:5e:23:6e:12:a9:
         9c:c4:09:70:0f:c7:66:2a:0c:cf:0c:1a:e2:71:0c:40:74:60:
         a3:c4:c3:c0:cc:e5:67:a1:c2:7e:04:a0:21:a0:92:0f:a2:38:
         f5:6f:97:30:d9:cc:cc:72:8e:5d:8e:76:fb:f2:0d:e9:49:f7:
         5d:35:70:fc:a8:fd:6c:55:80:5f:78:32:5b:1d:d6:97:c5:1a:
         de:d1:65:b5:c2:c0:05:86:03:8c:7b:4b:42:4b:9a:78:82:95:
         57:0e:68:2d:ac:59:45:fe:f1:1b:b2:5c:5c:61:ba:0f:d9:f8:
         ad:19:61:ac:b0:f9:66:48:a4:02:70:0f:08:1d:46:fe:f9:90:
         e4:24:01:ce:1b:e6:cc:72:f0:0e:27:15:9d:2c:d7:70:f8:d8:
         c3:b8:c9:7b:8e:e0:de:06:b1:60:5e:31:08:5f:81:79:ac:76:
         80:a1:4f:7c:64:23:2b:4b:2b:a7:ed:60:0e:aa:99:58:37:b6:
         50:02:be:dd:24:9b:91:fa:54:d4:25:cc:f7:4b:b9:26:6a:9a:
         0d:6e:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:56:34 2025 by rpki-client