Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
File:                     8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa (raw, json)
Hash identifier:          3WwXlb1Age+gbZFSNbiV0t4PL0LcIqPlN2KAFNErVVU=
Subject key identifier:   19:33:1D:30:85:9A:5F:0D:0B:6B:C5:AD:B3:0D:7A:8F:37:FB:36:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C073BD67DDD6D2F89C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100a:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c0:73:bd:67:dd:d6:d2:f8:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=987fc716-2e55-45fd-a238-3dee4710ddb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:7a:f8:7c:72:7b:87:66:4f:2a:e4:f0:ac:
                    b1:90:aa:67:71:23:28:fb:30:66:a9:e5:f1:0c:64:
                    8f:a1:53:d1:63:02:db:0e:d0:8e:39:2b:2d:9c:f4:
                    a2:2a:76:94:8d:b2:fe:ec:47:0d:57:e5:1b:3b:81:
                    0b:85:be:bc:2b:8b:e8:80:6b:31:ee:31:89:66:d5:
                    d7:59:e8:b4:f3:ed:2a:33:f9:b2:54:a7:ee:11:11:
                    a5:28:7e:b2:87:85:04:1b:7d:26:1f:b5:8e:a1:ce:
                    47:09:23:22:ee:c7:f7:35:24:92:2e:b1:df:7d:bb:
                    fa:9d:9b:86:9b:2a:f0:8c:d5:c2:17:64:0a:9e:10:
                    76:c0:51:fb:85:2f:ae:0a:db:fd:29:84:5d:70:ac:
                    c1:ba:be:db:0f:3b:3c:28:8f:76:16:d7:94:58:12:
                    74:9f:49:7f:45:ad:88:b7:41:92:4f:4c:57:ed:ef:
                    85:ac:e5:80:6e:aa:e7:98:c2:9f:b9:9e:ca:2a:ff:
                    a8:f9:4d:49:d4:1e:7f:99:14:e2:0e:eb:9c:1f:91:
                    c4:53:b0:8c:e5:ad:9c:fe:38:cb:17:b8:fa:04:97:
                    e3:50:a7:36:c0:a6:67:0d:6b:e5:66:23:c8:1c:36:
                    db:9f:8f:33:6a:37:ba:0f:a3:e3:c1:25:3d:9b:bc:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:1D:30:85:9A:5F:0D:0B:6B:C5:AD:B3:0D:7A:8F:37:FB:36:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:ad:c5:09:0f:95:15:af:d8:d9:e9:ca:05:53:fe:fe:ae:
         a5:1a:0a:3e:2f:b1:52:ad:b6:27:94:48:b3:ce:c9:fd:ce:57:
         bb:14:3d:b3:fc:5c:3e:f4:5a:6d:e6:11:08:38:e8:e1:3d:75:
         d9:f6:c4:4d:2f:b6:f7:dc:e7:90:ea:02:00:5d:50:3c:6c:7c:
         56:45:82:53:a6:f1:f5:31:2b:82:ba:37:ae:16:15:ba:c8:d1:
         f1:0c:d7:ab:dd:3a:66:e7:67:71:a4:59:fb:24:9d:d9:95:a8:
         61:ef:39:c0:c9:2e:a0:bb:97:d0:0a:98:8b:97:24:5e:cf:80:
         0e:ab:89:16:69:ac:0f:e7:f3:87:00:a0:c1:78:06:dd:a8:61:
         3c:c2:75:58:7b:27:bc:58:af:ff:c5:fc:ce:14:ec:26:0f:a5:
         64:22:f4:6b:08:40:bc:48:6b:18:3b:9d:a5:e1:bd:d9:3b:47:
         5a:d3:5d:cd:55:33:92:77:f8:8a:d4:72:39:4a:7c:68:0a:f3:
         1b:52:1a:df:05:bf:cc:54:31:b4:12:4d:22:31:b9:54:31:77:
         68:0b:f3:33:41:af:cf:77:10:2c:05:6f:0a:13:02:c7:99:b2:
         cd:33:12:ca:6b:b9:d8:a9:c1:5a:04:eb:94:bd:70:90:e7:6c:
         ce:4e:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:19 2025 by rpki-client