Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa
File:                     21c4f427-4442-3402-aed5-2e911972c64d.roa (raw, json)
Hash identifier:          WGQpjFYAzdV6YoYgVRnMBDHqvfWgnfA/XYgA8qspw/o=
Subject key identifier:   8A:41:87:B4:68:2A:FD:FF:A7:E3:E1:26:80:E9:B8:2A:E9:1E:54:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9B25E23243881A4FBED2FE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa
Signing time:             Tue 22 Jul 2025 19:27:23 +0000
ROA not before:           Tue 22 Jul 2025 19:27:23 +0000
ROA not after:            Mon 20 Oct 2025 19:27:23 +0000
asID:                     6167
IP address blocks:        2600:100e:b248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:25:e2:32:43:88:1a:4f:be:d2:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 19:27:23 2025 GMT
            Not After : Oct 20 19:27:23 2025 GMT
        Subject: CN=9ade17e0-17b0-4c4a-a432-583df482e0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:1e:95:ca:23:fe:76:c1:eb:c8:77:51:6d:
                    94:21:50:e7:95:7c:65:a1:4b:c5:2d:73:83:db:02:
                    63:d8:4b:6b:2d:84:f9:f2:2b:37:56:8f:8b:04:f3:
                    dd:35:8e:bc:44:8c:9a:d4:d4:9e:26:a6:ec:40:43:
                    33:e7:29:13:c9:82:e1:ec:a9:f7:fa:c0:12:d0:b3:
                    cb:1d:66:91:34:3d:b8:b6:b2:a9:79:57:db:2d:e7:
                    52:9a:67:2b:5c:ae:e2:38:d7:80:6d:ca:d5:83:09:
                    7a:1b:20:80:6c:b5:dd:02:dc:f4:8a:cb:67:2c:17:
                    ca:46:de:60:21:ed:f1:ba:85:a5:68:6c:1c:cd:29:
                    bf:31:86:e2:ab:c9:8d:a6:0a:59:bd:35:54:e1:29:
                    b3:e9:7f:fa:25:62:8e:64:15:ac:92:e9:0f:fc:04:
                    e3:46:9d:81:16:67:1c:fd:53:8b:a6:b5:9f:3d:a5:
                    ba:c1:6d:fb:b2:52:42:76:0e:22:c8:25:58:35:32:
                    30:f9:ee:05:3f:f1:82:95:6a:04:d6:38:b3:1a:a4:
                    62:94:39:64:a2:25:ed:9b:89:26:dc:fd:c1:e9:3f:
                    94:9e:e3:30:d2:eb:a6:97:fe:c9:af:a2:fe:0d:02:
                    4e:1e:85:ac:12:f3:8c:ff:b5:5d:8b:f5:a6:00:d7:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:41:87:B4:68:2A:FD:FF:A7:E3:E1:26:80:E9:B8:2A:E9:1E:54:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b248::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:37:f3:78:8a:2b:4e:b0:b0:4e:19:f0:76:d7:11:44:fe:74:
         d0:a2:63:58:b7:6e:cb:81:8d:ea:37:51:64:00:ee:1e:66:23:
         97:df:ea:50:a9:dc:2b:01:b5:78:42:97:ce:7d:0e:ad:1a:45:
         70:a3:dc:da:13:4f:36:69:60:a4:5a:53:69:be:46:7a:6c:42:
         37:2a:1f:68:88:8b:aa:5c:ec:74:37:7f:55:31:9b:02:1c:72:
         84:c4:1c:5f:1f:3d:1d:d1:59:b3:ed:51:4a:fb:dc:e2:3f:06:
         01:b2:19:de:f0:a2:48:d3:9e:14:7b:2d:b2:a2:06:9f:b0:d8:
         38:ce:27:fc:32:ba:7b:96:13:2c:5d:55:cf:04:a4:56:bd:1c:
         1f:f4:11:98:98:18:06:4a:ac:33:b7:d5:b3:cc:94:4e:f6:ae:
         14:76:c6:93:a1:f6:f2:86:84:69:3c:3b:15:c9:48:c1:ed:a8:
         22:06:13:3f:1d:88:88:e5:40:74:70:71:d8:26:7d:41:d2:a8:
         20:ae:12:29:0a:e1:3f:35:bf:1c:ee:5b:a7:23:ee:7f:d4:ba:
         1b:e0:5f:e0:16:2c:66:1e:26:db:cd:f4:c3:b1:4f:f1:6b:d0:
         4c:d4:8c:1a:db:ff:64:03:5c:d9:b6:d1:b2:2f:27:88:ad:74:
         e6:22:0a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:54 2025 by rpki-client