Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90cf32ab-8d08-34a3-be5d-0e981a827d8a.roa
File:                     90cf32ab-8d08-34a3-be5d-0e981a827d8a.roa (raw, json)
Hash identifier:          /SP6xtYwo2kpcz+z0KxBpIkDzl5RggCpHmR3t+dnm0Y=
Subject key identifier:   D3:E9:AB:60:22:04:C3:74:3A:83:C2:2D:9A:AE:32:92:5E:6A:57:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1065B9CB6E33843015C60A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90cf32ab-8d08-34a3-be5d-0e981a827d8a.roa
Signing time:             Tue 02 Sep 2025 19:25:36 +0000
ROA not before:           Tue 02 Sep 2025 19:25:36 +0000
ROA not after:            Mon 01 Dec 2025 20:25:36 +0000
asID:                     6167
IP address blocks:        2600:100d:b1a0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:65:b9:cb:6e:33:84:30:15:c6:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  2 19:25:36 2025 GMT
            Not After : Dec  1 20:25:36 2025 GMT
        Subject: CN=336797c9-5dac-42dc-a851-8b29a75195a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:59:bb:bb:fe:6d:53:3b:9d:0b:54:a8:f1:d5:
                    3b:70:ce:fc:e8:26:99:13:69:94:2a:e8:e8:03:15:
                    97:a1:58:5f:4a:7c:6e:ad:d5:c2:2a:4c:ea:83:d5:
                    1c:6f:b7:28:af:b1:f3:74:9b:3a:19:31:99:15:b1:
                    ed:fd:69:4a:24:01:7e:1a:ea:f5:11:46:fc:c2:ae:
                    06:08:2b:ac:83:bf:d4:fc:0f:5e:fd:f1:20:70:64:
                    75:15:c9:96:be:3e:50:9b:0e:5d:95:4e:e1:3a:4b:
                    8d:a9:33:d4:78:a9:3d:b5:5f:64:86:41:59:14:6c:
                    cf:d3:3d:a5:85:a2:97:86:c4:c2:a4:28:bf:37:01:
                    be:15:e5:b7:06:db:06:6f:61:e2:86:17:5a:fc:36:
                    b3:e4:22:b2:4f:94:b2:b8:bd:df:62:a6:fb:d8:df:
                    ca:e9:10:cb:12:31:bf:67:4b:4e:bf:5f:a3:1b:1a:
                    df:88:b8:20:27:9c:06:64:ed:12:3d:28:6c:82:18:
                    df:55:db:f0:47:fb:ff:91:44:9e:3c:bc:4d:ff:4c:
                    19:85:01:ab:a6:41:6d:a5:bc:f7:b9:46:dd:5d:db:
                    de:e5:fc:32:a3:9d:04:8c:48:e4:eb:7c:85:6f:27:
                    90:fb:f9:81:38:e3:0b:4a:9b:72:ce:72:e7:9b:94:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:AB:60:22:04:C3:74:3A:83:C2:2D:9A:AE:32:92:5E:6A:57:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90cf32ab-8d08-34a3-be5d-0e981a827d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:72:77:d5:10:2b:4e:25:2e:d4:a4:a3:64:b6:bd:c4:97:97:
         8b:74:d3:d3:da:d2:f9:a9:ea:12:21:db:be:eb:d2:7b:f2:f8:
         2e:e9:4a:d9:f2:a7:47:b1:f6:e5:07:98:ed:b7:9e:01:29:d5:
         72:35:be:c4:60:6e:b2:a7:39:9d:9b:19:1d:d6:2d:37:fb:41:
         60:ae:e1:02:9e:61:37:60:d6:b6:d7:9d:ee:9c:4e:e2:9c:14:
         bc:47:ea:7c:a6:34:06:c6:6e:a8:61:7f:f9:24:61:bb:c2:e0:
         72:1a:79:39:07:78:ef:6a:45:25:61:cd:f0:72:11:8b:c7:84:
         ad:b5:7c:8f:0b:38:40:63:dc:7a:0e:5e:8a:78:ae:8b:33:5d:
         b3:32:a5:07:ff:bf:00:b2:b7:91:2c:0a:ed:26:1f:5a:0b:dc:
         ef:82:31:ad:5c:ca:e8:86:4e:f7:1a:21:4a:84:7d:89:54:d8:
         cd:b4:56:32:ca:97:09:af:da:4d:e3:bf:4e:05:c6:e4:fb:45:
         84:1c:88:1c:74:41:da:29:34:60:e4:a9:ab:55:0e:e8:bb:55:
         45:48:72:c2:4e:e8:cc:3b:63:7f:f4:e3:f8:1d:a3:a7:64:4f:
         c7:c7:7d:85:06:75:89:77:0b:78:20:94:94:5a:d6:0f:31:9d:
         24:f6:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 17:54:08 2025 by rpki-client