Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ae5f72-4d70-3a5b-81ad-65943db19235.roa
File:                     f0ae5f72-4d70-3a5b-81ad-65943db19235.roa (raw, json)
Hash identifier:          iQEKNznNT+ZB5mKYOnPtJMzHC6ndkkMeFhGxsd6TNBg=
Subject key identifier:   DE:BA:F3:4F:00:A0:BD:A8:ED:8D:30:74:C2:39:D8:24:07:5C:DC:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C4E02CD76998A49B1E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ae5f72-4d70-3a5b-81ad-65943db19235.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100c:e200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c4:e0:2c:d7:69:98:a4:9b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=4676c174-0955-4572-b614-1b5015fc853a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:72:b2:b0:d6:42:3c:cf:e2:ec:0e:7b:f8:
                    1b:a8:09:64:00:e0:db:b1:8c:dc:b5:43:dd:48:75:
                    a5:a1:b0:7e:fa:ea:80:92:93:33:5b:a9:47:48:5b:
                    5b:bf:c1:57:53:fa:aa:19:34:30:54:4f:61:96:4f:
                    d6:fd:30:0d:f5:5b:4d:3f:09:d6:e4:62:1f:09:e9:
                    7c:59:cb:25:61:cf:21:8d:ab:09:77:d8:7b:1d:18:
                    a7:98:bd:cf:cd:fe:5f:12:c7:d1:7d:a2:a3:41:c8:
                    71:8c:df:85:e5:ce:0f:76:0c:fe:b6:aa:ec:e2:1c:
                    a3:40:3d:cb:34:74:4f:f0:71:99:d0:7f:cf:f6:52:
                    4d:5b:c1:29:e4:a3:46:da:3e:bd:54:f5:43:36:95:
                    f2:63:69:d6:f1:e8:5f:0a:ed:bc:fd:26:f1:f1:d1:
                    97:12:e8:95:81:b0:7f:c8:2c:36:1a:ab:b7:ca:33:
                    61:0a:d6:48:f1:ad:d1:ee:41:25:9c:4e:f0:ae:63:
                    f9:a4:0b:30:7b:21:12:17:1c:82:41:31:e7:aa:99:
                    da:2e:b3:b4:71:c4:f4:38:76:f4:e4:a2:14:9c:eb:
                    31:c2:bd:63:47:54:1a:cc:9a:3e:aa:17:90:03:3b:
                    8b:93:38:32:04:a7:8a:d0:ac:f3:57:d8:98:92:a3:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:F3:4F:00:A0:BD:A8:ED:8D:30:74:C2:39:D8:24:07:5C:DC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ae5f72-4d70-3a5b-81ad-65943db19235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:e200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:e8:55:a5:83:c6:ba:c0:c9:03:97:7a:1f:c1:b5:8c:c2:
         d6:da:a7:4a:ad:d4:6e:09:65:42:5a:8d:a9:68:e2:2e:7d:59:
         76:4d:21:66:ef:b9:6d:06:fe:b1:4a:50:a0:43:07:5f:08:54:
         5d:94:89:a7:7c:32:ff:70:45:e1:dc:26:6b:81:46:4c:6d:f9:
         92:91:d3:32:eb:34:97:91:c7:25:56:91:5a:4e:d1:a0:86:c3:
         75:b9:86:63:41:53:2b:c0:18:cc:f1:42:7e:11:67:72:29:8b:
         4b:74:86:d8:98:14:5a:70:90:67:9a:d7:79:6e:c5:8b:16:83:
         63:6a:56:7e:aa:fd:9d:e8:be:ad:6f:4e:80:b7:bb:bc:c4:ee:
         65:e7:07:79:d6:6a:42:17:96:b9:58:a8:e8:5f:60:e1:fb:b1:
         c5:5a:a2:5d:b1:b5:6d:d9:5f:d3:1e:a1:26:ab:6d:8b:0d:70:
         c6:3c:ef:45:a6:af:b8:0f:f6:b1:9e:9c:45:c9:26:6a:fc:72:
         69:63:8b:ce:5f:d1:47:a2:85:c4:9d:66:58:fd:51:d0:0a:4a:
         ca:8b:d9:e6:c7:55:f2:3a:87:e2:6f:04:88:e6:7d:52:d5:d3:
         41:34:eb:41:cd:66:23:8d:b3:98:07:c5:f4:5f:9a:74:34:d3:
         58:bc:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:59:30 2025 by rpki-client