Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa
File:                     e729435a-0215-383a-8b95-ce7cf5ff4c84.roa (raw, json)
Hash identifier:          HQrM58v4iBO4Ua20GYVydDU92I6kFFBoYHp6kQQbjIs=
Subject key identifier:   B3:DE:20:5F:A5:22:20:05:30:6C:EB:DA:13:C3:38:A3:FD:3B:1E:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B16C092BCC7B3BC9AC480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:16:c0:92:bc:c7:b3:bc:9a:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f99a3862-5459-471e-a2fc-88554d55b095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:d3:6a:e1:c0:cf:14:09:1d:80:94:75:24:
                    86:b4:84:a0:97:a7:ca:10:bf:b7:d2:77:97:07:d3:
                    df:6e:3b:46:39:ec:fb:7f:9e:eb:fe:42:23:7a:8b:
                    d1:e5:f5:cd:81:0e:84:8a:52:a9:eb:a9:78:36:5b:
                    10:c1:c8:91:aa:7c:68:14:19:88:cd:06:d1:88:29:
                    ef:35:46:3e:cc:07:99:ad:23:93:f3:cd:c1:be:90:
                    61:01:8e:f2:39:44:14:ac:7b:b7:5d:e0:55:79:c9:
                    ff:07:85:0f:5c:f2:8d:d6:b8:2e:98:d1:c2:30:68:
                    fe:a2:8f:ec:b3:b3:9a:16:2c:41:3a:e4:6a:bc:58:
                    f7:b6:d2:39:7d:6a:f7:0e:1e:0e:8c:27:27:cf:d3:
                    fc:42:92:b7:45:21:65:90:0a:3b:e4:93:8f:d7:55:
                    e7:79:c8:cf:26:72:d1:ed:ae:8e:fa:49:03:d9:5b:
                    11:96:34:cb:45:d7:c5:73:b0:4c:4f:6a:fb:32:08:
                    05:de:30:e9:26:9b:6d:0b:1c:72:ad:a4:d7:5e:70:
                    93:17:63:ef:9c:41:06:f8:26:a8:f7:12:b1:97:8c:
                    fd:24:b1:1d:dd:b1:18:12:1e:20:de:e4:8e:e8:41:
                    e0:8b:d4:74:a5:f0:83:80:cf:59:77:3b:75:f2:5d:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:20:5F:A5:22:20:05:30:6C:EB:DA:13:C3:38:A3:FD:3B:1E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e729435a-0215-383a-8b95-ce7cf5ff4c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:cf:66:46:5c:7c:4f:4a:95:8c:e6:52:6f:33:0d:6f:3d:
         f6:a9:b1:58:ae:a8:9e:98:6e:94:a9:e9:8d:a3:5e:df:5a:ac:
         d2:ad:ca:4f:55:5d:52:be:fb:a8:3f:f2:00:5d:08:a9:07:f8:
         48:f0:75:fa:97:6e:bd:d7:3b:67:b9:0d:67:4b:31:1d:ae:b2:
         c1:da:c9:da:e7:7d:20:b0:b1:2e:bf:a7:20:55:de:34:1a:e9:
         63:42:5d:d6:22:6f:ba:34:54:e5:a8:90:85:02:bf:31:7e:67:
         73:41:52:15:53:06:5c:c9:00:0d:ea:5c:3f:38:07:45:b7:c7:
         38:aa:d3:8a:14:95:19:6d:fb:82:3f:67:c4:39:8e:a1:67:19:
         22:bb:5d:aa:65:c2:5b:9a:d1:dc:e7:06:f7:12:d4:7e:a0:ae:
         db:30:bf:39:3f:29:f3:b5:10:8f:38:38:c5:0b:83:4c:e0:9b:
         7e:1d:2c:2a:1c:88:c2:ae:1b:ef:2c:56:d6:8f:2f:23:a9:48:
         bf:ed:6c:a7:b5:17:b1:c0:88:8b:c1:d1:fc:08:db:9e:30:5c:
         fc:02:88:f4:14:cc:c5:e3:6c:5e:d5:47:12:38:c1:b5:eb:fb:
         2a:0e:eb:16:04:00:47:e2:c3:c5:44:2a:80:ca:64:5a:6a:2b:
         98:1c:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:01:56 2025 by rpki-client