Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa
File:                     97b47317-774d-36a3-8cfb-1297a5d40476.roa (raw, json)
Hash identifier:          QBkVYUVufVJJOuQN66YdiNlA0gxv0gVPcsCptpxP8aI=
Subject key identifier:   27:1E:71:95:C0:CD:D4:5C:78:1C:0C:BC:87:00:31:5A:34:F2:99:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C55659CF4B5B5F26A6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:9110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c5:56:59:cf:4b:5b:5f:26:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=80ffa76d-0d66-4b44-9334-211f906acf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:48:b9:35:a4:6e:b9:47:5e:43:ae:72:48:
                    e4:a7:ed:79:9d:a0:12:24:9e:2e:d9:8a:e2:75:4e:
                    17:c9:8f:ce:dd:9d:9b:5c:43:e0:16:e0:d6:e6:1d:
                    1f:f4:f0:02:f9:4e:3e:ef:dc:6c:1a:74:49:ec:6e:
                    e4:ed:76:39:30:0a:f7:29:e7:b0:f9:fc:98:22:24:
                    40:94:42:e7:8d:e3:ad:cf:7c:75:a2:d9:91:2d:f1:
                    95:8d:5a:ef:a9:2a:38:d3:a1:2b:6a:91:5f:6a:7c:
                    88:1a:38:cf:7b:56:31:73:f1:d9:96:ce:fa:98:da:
                    5f:6c:a9:27:a0:4a:f8:28:c5:bb:d1:14:3f:1b:cc:
                    1c:8e:0c:a0:f4:3a:62:f2:37:1c:b7:27:e8:b8:0b:
                    a6:bf:2a:6d:ee:e9:53:fc:38:f4:b5:59:ce:74:4d:
                    ff:22:f2:ad:18:ce:26:05:2f:eb:f8:b7:ae:71:55:
                    ac:f3:d1:95:33:04:c2:f7:86:b9:78:57:58:e8:5f:
                    d9:aa:cb:73:dd:b0:9a:6e:71:bb:29:20:36:b8:40:
                    c2:71:9c:f9:b3:60:52:32:6e:4b:fa:b4:1f:26:0f:
                    8a:23:21:e9:44:d6:74:dc:a2:3f:86:e9:49:0d:4a:
                    f7:fd:41:99:08:21:0b:df:30:7f:73:45:f4:db:09:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1E:71:95:C0:CD:D4:5C:78:1C:0C:BC:87:00:31:5A:34:F2:99:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1a:d4:3f:6e:05:6a:6b:73:3d:68:d6:6d:a7:89:e3:72:08:
         36:cb:3f:68:a1:d4:cc:66:ba:9b:50:3f:ee:90:db:ea:6e:ff:
         a7:85:91:26:a1:34:45:b2:a8:c1:6f:34:18:40:c2:3a:4a:3e:
         4a:1e:b2:ee:19:f8:f1:d4:a3:36:db:35:34:f0:25:2e:9a:22:
         79:6e:75:db:e5:22:0d:ae:e7:24:f4:08:35:73:7d:68:ad:8f:
         11:ee:9c:3f:a5:aa:9d:7b:61:17:2c:92:66:8e:ea:3c:6a:24:
         20:b0:36:e3:08:73:72:02:85:1a:4d:93:ca:b2:98:64:6c:39:
         7b:70:66:ca:c9:7d:35:82:a3:f2:2f:1f:bd:42:d4:54:ad:a2:
         c2:2b:37:db:f4:0a:05:ce:61:b9:05:4e:ff:37:ff:8c:f2:ef:
         0f:e0:11:b8:7c:f3:72:78:98:d7:37:17:f1:e3:8b:7e:16:f3:
         bb:3d:1d:4c:7d:ec:8d:f5:5c:d4:c0:ef:54:f1:d2:77:f4:67:
         74:00:9d:bd:4f:73:fa:76:cb:f7:7d:73:8c:45:51:a0:7b:b3:
         d3:05:0a:45:9f:a7:6e:6a:7c:74:dd:f4:c6:b8:50:0b:60:4e:
         51:61:44:1f:7d:9f:00:10:ed:75:cd:c4:b5:2b:ab:d2:00:ca:
         82:69:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:01:59 2025 by rpki-client