Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbee20fa-c6ac-368f-97c0-2969e6c65895.roa
File:                     fbee20fa-c6ac-368f-97c0-2969e6c65895.roa (raw, json)
Hash identifier:          fQ9npJ56uQHqXQAl7mMjxgoLxDboOE2N2WL93hpuJSY=
Subject key identifier:   94:B0:2E:54:E2:79:D1:BA:69:41:D8:6D:F6:8E:24:E8:35:C4:E3:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B0131BAE30B44B6FFC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbee20fa-c6ac-368f-97c0-2969e6c65895.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:be1c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b0:13:1b:ae:30:b4:4b:6f:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=976327de-f208-4d04-8a08-7127cac32f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:34:79:0e:d0:76:2f:22:7d:a7:e2:4b:11:
                    a6:c1:e3:29:8a:cd:8b:6e:80:4e:a9:09:41:f6:98:
                    c9:3c:49:fb:20:ff:d1:f4:3e:bc:78:8a:ad:90:0b:
                    3a:a0:c2:3e:5f:52:fd:9e:7f:eb:dc:e8:fe:7e:a5:
                    b7:83:d7:3f:62:e8:48:4d:e7:ca:c7:04:f0:f2:20:
                    69:ba:a9:80:a1:aa:19:76:33:7e:56:20:bf:3f:68:
                    d7:7e:57:03:0e:79:a5:cd:09:0b:5f:41:2d:11:91:
                    4b:78:e5:49:ce:2c:79:2d:2d:d1:ff:ee:34:19:0e:
                    9b:7d:47:1e:8f:81:96:ea:b3:67:3c:7d:22:a3:bf:
                    dc:7f:69:32:f8:20:9a:36:bf:b9:be:fc:41:e1:60:
                    b4:92:35:5e:3e:c4:71:e8:db:0b:34:76:0c:15:ed:
                    a6:b3:48:31:de:61:d7:ea:fc:5a:f1:eb:fb:93:33:
                    37:40:a1:b6:9f:d1:3b:e6:54:56:1d:8c:d9:85:39:
                    3b:c9:7d:19:b5:36:fe:f5:e1:00:2e:d3:6d:da:26:
                    a9:0e:e2:57:3b:d0:0d:1c:83:6f:82:47:42:a6:1c:
                    d8:56:1e:e4:5c:c8:a2:f5:8a:f6:79:32:48:a7:b9:
                    93:9f:5c:a2:af:aa:f1:d6:05:b6:6c:c9:1e:e1:87:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B0:2E:54:E2:79:D1:BA:69:41:D8:6D:F6:8E:24:E8:35:C4:E3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbee20fa-c6ac-368f-97c0-2969e6c65895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be1c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:97:70:14:79:24:63:c6:5e:99:9e:dd:60:41:a0:9b:fe:3f:
         c2:b6:9c:0c:70:00:9c:c0:70:6a:a8:c6:a7:18:4c:2a:fa:e1:
         9d:cb:8e:82:7c:1f:63:e2:57:95:7b:a8:63:10:39:43:5a:d2:
         67:42:70:a4:2d:4a:0e:1c:2e:58:57:c2:ae:e2:0f:2a:36:c1:
         fd:a5:86:4a:75:77:32:8e:27:0c:53:d6:f5:2b:b0:30:e3:0f:
         81:2c:6a:76:9a:a0:da:a3:06:29:80:6e:f5:31:95:c6:62:45:
         77:7a:bf:3d:d8:8f:f8:aa:aa:b8:22:fa:bb:f2:81:20:12:5b:
         3c:a4:c1:de:33:b1:f0:ca:fe:e3:31:fa:e2:f2:d5:3c:ae:6c:
         87:63:48:44:1b:69:c1:32:45:ba:2b:80:70:31:90:b9:5f:bb:
         51:20:08:f6:88:5a:93:88:5d:38:32:e4:87:b6:10:6d:20:0a:
         d4:43:ca:46:25:ab:f0:99:89:5e:bb:78:f3:19:8e:1f:71:62:
         f5:7e:fb:dc:75:49:ca:31:0f:76:61:41:40:14:c3:fe:20:00:
         83:ce:e5:75:24:39:d5:d4:fe:7b:28:26:3f:47:d0:7d:a7:23:
         4c:bb:5a:27:00:70:05:9f:2e:27:cc:64:bd:d9:c3:35:8c:e8:
         20:61:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:18:41 2025 by rpki-client