Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f1057e-183d-31e0-99d6-8fe0c0dd9b83.roa
File:                     f9f1057e-183d-31e0-99d6-8fe0c0dd9b83.roa (raw, json)
Hash identifier:          1JXIRdU3R5ln9RSc5RRRzyLWmFpP/CGMCaOxRV/IFGk=
Subject key identifier:   D9:47:47:18:F4:3F:AA:35:3F:55:5C:7F:22:01:32:8F:65:8C:EF:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B34DD09EE6FCA5F8B580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f1057e-183d-31e0-99d6-8fe0c0dd9b83.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100f:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b3:4d:d0:9e:e6:fc:a5:f8:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=55ad3f33-5582-4660-b62f-0c81813b6a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:eb:7a:e9:06:bd:c6:6a:45:8b:d9:92:e0:
                    a2:e8:46:8c:9b:9a:48:10:16:1b:c6:97:12:25:ae:
                    72:f2:f7:c1:ed:e0:36:69:a9:b9:9a:49:d4:d3:e3:
                    5b:bc:8d:be:8a:97:59:0f:5f:88:18:85:63:de:5f:
                    f6:21:c9:4a:72:51:78:7f:08:fe:98:74:da:13:c1:
                    81:f7:d7:30:5a:20:fb:2d:de:31:bc:f5:2d:22:ca:
                    56:25:b3:e7:23:b5:ea:d9:c1:93:b8:17:93:c9:a4:
                    a3:8b:a4:36:36:ab:4b:da:f0:ad:26:9a:f2:1a:fb:
                    68:16:f1:40:e7:62:8e:98:2e:df:51:ee:00:ce:7e:
                    0f:28:f0:82:23:50:df:66:c7:1c:c4:fe:a5:1e:ba:
                    59:fc:05:de:cd:bb:f9:23:91:90:63:e5:1f:c5:8c:
                    29:8a:4f:f4:56:fa:7e:91:ac:63:b4:a9:5f:99:48:
                    5f:0a:a5:be:f0:02:ed:f1:28:7e:b5:d3:ac:42:4f:
                    e7:ad:aa:47:78:3c:f5:02:40:79:ef:26:f3:f2:52:
                    aa:ad:66:14:81:0b:f4:29:12:aa:7d:08:0d:9b:dc:
                    fe:38:1c:b3:5b:72:65:b8:f0:e3:69:09:35:e6:f7:
                    bb:af:1d:6c:a1:57:13:2c:0b:14:0c:24:fc:5d:90:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:47:47:18:F4:3F:AA:35:3F:55:5C:7F:22:01:32:8F:65:8C:EF:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9f1057e-183d-31e0-99d6-8fe0c0dd9b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:ba:93:4e:27:82:ed:c1:74:b0:cc:e6:d3:29:29:74:90:
         0b:d7:4c:70:25:7f:38:ee:cd:4d:84:cb:bd:5c:80:12:63:96:
         3f:9e:cd:d2:0f:8e:23:e4:a0:a6:ea:14:a8:91:4d:41:66:b0:
         b3:12:cf:57:ab:64:19:5d:36:55:42:81:c5:2b:5c:0f:6a:b3:
         51:19:26:e4:43:51:37:8c:9e:ff:28:07:6b:71:01:b0:09:3e:
         6e:86:7d:77:c2:0d:8e:89:fa:14:18:fc:e4:c1:a7:19:46:ab:
         53:d5:5c:a0:ba:db:d8:66:3c:99:63:5c:b7:a8:db:b1:41:c7:
         73:55:41:0a:56:4f:fc:34:68:f6:67:f9:ee:0f:83:3a:87:29:
         0d:f3:12:cf:c0:89:78:8f:c8:de:27:2e:61:f5:1d:22:db:60:
         2c:23:a0:6f:76:fa:a7:e8:b1:30:5c:bd:a0:8c:88:c3:d7:2b:
         01:41:46:3e:eb:b8:27:f8:b0:2d:33:4f:12:85:47:60:12:89:
         f4:44:84:f2:69:fa:78:53:c0:ed:db:55:9f:3f:a6:dd:6d:07:
         ed:46:f4:3d:5b:33:36:cb:42:63:2b:37:c4:17:96:dd:5b:c3:
         76:85:75:81:aa:22:47:4b:2e:f3:4f:84:1b:37:e3:fd:59:a3:
         76:38:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:11:44 2025 by rpki-client