Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa
File:                     d042b4b6-5df6-3674-84a5-b742778b4861.roa (raw, json)
Hash identifier:          VAbKiXVtI8bejPz73r1ZC87cdMuwE42h3zlIwhblfPU=
Subject key identifier:   9A:0C:33:31:41:3D:8E:50:B1:45:F6:41:49:B1:0D:7E:F7:7B:E5:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B000AFEBC2AF7571A700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:be1a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b0:00:af:eb:c2:af:75:71:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d76fb301-67ed-49fc-bfe5-7bc0e9398c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:ca:1e:96:7e:25:3a:ef:68:54:f6:51:7f:
                    13:ac:62:46:36:50:ba:a6:5d:f2:e0:fb:79:42:a2:
                    fe:40:d1:2c:09:54:bd:a3:bf:f9:22:01:13:f0:4e:
                    09:6a:a5:98:a6:06:59:39:49:87:ad:3f:77:5e:d8:
                    c1:18:b3:cb:4b:48:64:8b:2e:c2:e7:0c:3f:ee:a1:
                    e7:e6:26:09:79:b3:49:fb:39:87:1b:94:56:8d:53:
                    e8:1f:7a:6a:18:5a:6c:6c:93:d9:43:23:39:71:7a:
                    5e:5c:d8:a1:0f:0e:8c:ba:c6:bc:29:27:27:13:f4:
                    62:e9:c3:20:ea:d8:7a:ea:3b:44:5e:5e:7f:bd:62:
                    f2:c8:20:63:bf:e7:04:fb:84:86:b3:2f:f4:8c:f5:
                    2f:01:97:d4:dd:23:f9:b0:87:75:d3:2d:5e:2b:bb:
                    41:0e:dd:99:0e:90:b5:92:08:19:02:14:99:9c:d3:
                    a1:34:bd:69:00:7a:d5:c8:67:14:58:b1:cb:72:1f:
                    51:9d:65:53:46:a0:e5:10:60:9c:dc:5f:97:fa:a8:
                    eb:56:40:5d:a5:99:d0:73:4b:48:13:3a:c8:d0:f4:
                    c5:66:a4:a2:c0:2e:50:57:0c:39:d9:91:dc:46:5d:
                    b8:f2:26:69:ca:0f:6a:d6:21:77:a8:18:94:75:19:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0C:33:31:41:3D:8E:50:B1:45:F6:41:49:B1:0D:7E:F7:7B:E5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d042b4b6-5df6-3674-84a5-b742778b4861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:a7:bd:7b:95:1a:c7:c2:65:42:dd:0e:f3:57:33:b1:38:
         d4:7f:1e:7f:f8:0c:33:0a:7e:5a:c8:08:63:33:ba:e6:bc:c5:
         dc:47:c8:45:de:9a:ca:27:b6:7e:89:99:da:8f:dc:f0:e0:5c:
         79:fb:44:6a:3f:79:26:4d:a1:55:19:ea:98:fb:75:27:35:62:
         1d:e6:4e:5f:b6:93:71:98:0a:70:4d:16:4e:38:52:c2:11:79:
         d5:ee:78:19:72:98:42:71:d3:5d:cb:c2:cb:90:86:eb:19:36:
         80:4f:b2:72:90:4f:ae:57:9e:e7:e1:d4:97:10:ec:9c:36:39:
         b0:9b:da:7e:b0:98:c3:7f:6f:1d:6b:cd:0b:4e:e7:77:66:ca:
         7d:c0:49:2c:0c:8e:03:0b:e0:0e:e9:5d:ac:86:0b:84:2f:c5:
         47:b5:b2:36:59:0e:f2:8c:28:30:78:21:bb:29:2a:43:ac:77:
         05:14:81:0b:d2:74:fa:27:e5:dc:10:e8:4f:5a:d4:85:38:42:
         a1:d4:9f:f4:bf:02:22:00:5d:27:e7:70:cb:74:48:5b:0d:7a:
         ec:80:d7:0f:07:73:1b:76:68:8e:fe:e9:41:40:83:94:46:f6:
         a9:32:1d:6d:60:1b:1b:fd:2c:4d:01:ef:a8:80:b0:5c:b8:ad:
         fc:a7:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:45:19 2025 by rpki-client