Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b305e941-189a-36ae-9537-ffe6dbcc7478.roa
File:                     b305e941-189a-36ae-9537-ffe6dbcc7478.roa (raw, json)
Hash identifier:          ttWgMmebIV/X1rrQKZGr3/71mpZh+uiu1tfcKYdstOA=
Subject key identifier:   F9:6A:A0:FB:E6:0C:27:75:10:47:3D:90:DE:FB:3C:C1:62:89:D8:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B04A64279A95A290BA60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b305e941-189a-36ae-9537-ffe6dbcc7478.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:bf16::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b0:4a:64:27:9a:95:a2:90:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=0b6efef0-2d18-4ba3-9f3c-5be1204bda13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:d3:09:79:ed:a7:03:e7:1b:4e:bb:6c:5a:
                    09:d0:7e:1f:cd:8e:22:3e:3c:f1:43:3b:d3:fa:c0:
                    8c:f3:d1:59:01:28:86:04:4f:6e:16:3e:d8:49:22:
                    97:61:3c:b9:28:58:08:d2:31:c2:0b:36:72:70:de:
                    ca:ea:e3:27:f5:2f:39:ec:56:e5:ab:ed:cb:0c:5c:
                    e9:50:fe:d8:0e:b3:6a:8d:17:f2:0e:d5:51:e4:1e:
                    c9:7b:de:cb:8f:3d:7d:37:bc:ef:17:83:80:0a:8a:
                    ad:4d:64:86:4c:00:87:3d:cf:a3:83:f2:63:01:bd:
                    4d:d2:fb:24:6b:3b:f7:15:c4:47:06:a2:94:68:81:
                    bd:33:ce:2b:82:b7:85:fd:7e:02:36:04:10:26:52:
                    0f:aa:e3:f6:d2:7f:04:f3:97:f0:7a:3f:8c:55:5e:
                    ab:10:b6:14:6f:d1:a1:01:0c:d5:69:2b:38:16:54:
                    57:29:63:80:50:79:88:09:92:9e:27:29:1e:7b:b3:
                    3e:95:34:a2:82:f0:b3:7e:5a:aa:7f:c8:de:2e:1a:
                    65:50:e3:52:d0:b7:e6:9c:ff:b6:af:ab:9d:d2:df:
                    a2:19:2a:8f:ba:93:a9:0f:99:c1:81:4d:13:0a:2c:
                    e0:dd:c9:5f:eb:d8:1f:91:58:78:99:9b:3e:cf:70:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:A0:FB:E6:0C:27:75:10:47:3D:90:DE:FB:3C:C1:62:89:D8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b305e941-189a-36ae-9537-ffe6dbcc7478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:67:c0:b3:b2:d1:d7:fe:21:cb:18:ce:6c:a3:f4:6e:b9:
         cb:15:89:09:13:39:7b:63:5f:e8:38:a1:0c:a2:2d:65:de:1a:
         6d:c2:7b:e9:38:5c:1b:f8:68:f1:1e:e0:75:f0:86:5a:bb:af:
         27:6d:21:9b:c0:ba:c0:70:57:14:c3:bb:ab:f7:20:7f:d7:13:
         c4:1f:d7:17:eb:e5:f4:b1:49:41:cb:d3:cd:3d:a8:73:d9:25:
         fc:2d:7f:d0:2c:cc:59:14:f5:74:51:dd:29:24:48:42:96:88:
         42:2d:f6:3e:84:16:ce:88:25:75:96:cb:e5:99:a2:75:8f:05:
         fa:ef:94:55:7a:38:83:0d:e8:10:cd:a3:00:fb:7b:41:9f:b6:
         20:f4:17:23:28:8b:1e:8f:5c:d9:30:93:c2:47:a9:87:cd:d5:
         01:f7:ea:81:66:77:81:57:74:a9:b6:e7:ce:d6:a1:55:44:d1:
         fd:2c:aa:48:1c:9b:4d:91:50:f2:3b:eb:92:c5:46:74:c9:e9:
         68:00:aa:22:be:33:46:60:94:0a:d0:9e:bc:1a:53:11:ee:1f:
         05:54:9c:fb:d4:a9:1b:85:18:26:fd:31:9c:63:82:d1:df:c8:
         2c:c2:07:50:dc:3d:46:f7:c0:da:5a:8e:79:ab:ed:89:fe:30:
         50:58:2f:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikLBKZCealaKQumAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MGI2ZWZlZjAtMmQxOC00YmEzLTlmM2MtNWJlMTIwNGJkYTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodTTCXntpwPnG067bFoJ0H4fzY4iPjzxQzvT
+sCM89FZASiGBE9uFj7YSSKXYTy5KFgI0jHCCzZycN7K6uMn9S857Fblq+3LDFzp
UP7YDrNqjRfyDtVR5B7Je97Ljz19N7zvF4OACoqtTWSGTACHPc+jg/JjAb1N0vsk
azv3FcRHBqKUaIG9M84rgreF/X4CNgQQJlIPquP20n8E85fwej+MVV6rELYUb9Gh
AQzVaSs4FlRXKWOAUHmICZKeJykee7M+lTSigvCzflqqf8jeLhplUONS0LfmnP+2
r6ud0t+iGSqPupOpD5nBgU0TCizg3clf69gfkVh4mZs+z3BH4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPlqoPvmDCd1EEc9kN77PMFiidghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMwNWU5NDEtMTg5YS0z
NmFlLTk1MzctZmZlNmRiY2M3NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDr8W
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKnsZ8CzstHX/iHLGM5so/RuucsViQkTOXtjX+g4oQyiLWXeGm3C
e+k4XBv4aPEe4HXwhlq7rydtIZvAusBwVxTDu6v3IH/XE8Qf1xfr5fSxSUHL0809
qHPZJfwtf9AszFkU9XRR3SkkSEKWiEIt9j6EFs6IJXWWy+WZonWPBfrvlFV6OIMN
6BDNowD7e0GftiD0FyMoix6PXNkwk8JHqYfN1QH36oFmd4FXdKm2587WoVVE0f0s
qkgcm02RUPI765LFRnTJ6WgAqiK+M0ZglArQnrwaUxHuHwVUnPvUqRuFGCb9MZxj
gtHfyCzCB1DcPUb3wNpajnmr7Yn+MFBYL0c=
-----END CERTIFICATE-----
Generated at Wed Jul 9 22:08:42 2025 by rpki-client