Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa
File:                     8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa (raw, json)
Hash identifier:          uSYiQ29s8e1o5tsswgZ8D5GFhoHCsEd7o/LACFM59DU=
Subject key identifier:   ED:F3:1A:DA:DD:98:F3:4A:CD:68:B8:3F:70:7D:98:CB:62:D6:44:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15EC3A978457E697079900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:100a:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ec:3a:97:84:57:e6:97:07:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=e20b4e34-4530-4968-b2ad-2784f71634a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:4f:af:dd:f5:a0:16:3d:19:f7:41:a8:4e:
                    f5:ac:ef:79:e2:23:1c:30:ca:20:bb:08:90:d9:69:
                    53:a7:d2:e5:53:0d:22:39:55:b5:8a:59:33:95:f8:
                    ce:18:6a:a2:27:7e:be:4c:ed:dc:9b:af:d4:db:b6:
                    6f:77:60:92:d6:d1:47:4b:09:c2:9a:8e:24:29:5e:
                    24:86:91:f9:6d:46:c1:2a:e8:6c:4f:b4:52:05:8b:
                    07:90:d1:ff:0e:aa:0b:a4:6a:8b:3e:f8:32:a3:28:
                    76:88:b7:27:66:8e:9d:41:8d:d9:a2:d7:74:23:a6:
                    5e:c8:f6:4c:57:f1:b0:3d:e4:b5:b1:ac:f5:c8:6d:
                    4c:3b:1c:b1:07:48:f7:68:cb:31:1d:63:16:0e:e9:
                    92:a9:85:65:82:38:40:2f:f7:a4:5c:c4:ff:9c:09:
                    7a:32:97:aa:d1:d1:9d:1e:e5:ff:c5:08:71:29:15:
                    59:3d:f9:d5:51:db:11:06:75:a1:5c:f4:16:2c:05:
                    5c:f5:73:57:0b:0a:77:ee:20:16:fd:0b:ec:f9:6c:
                    7d:34:f7:b9:24:01:3d:0e:8c:05:26:56:af:1f:13:
                    9b:f2:86:25:29:68:78:d6:fb:af:84:8d:a6:6f:c6:
                    a6:5f:3b:8d:18:d4:db:7c:d2:8c:15:57:d0:75:85:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:1A:DA:DD:98:F3:4A:CD:68:B8:3F:70:7D:98:CB:62:D6:44:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:15:95:fb:5f:80:da:d9:ae:c5:80:e4:8e:c4:51:72:7c:
         83:26:09:c8:7a:ac:4e:9e:36:58:1e:47:cc:50:50:61:b8:52:
         0d:9b:3e:4d:fe:f3:eb:b6:e0:ff:60:dd:be:16:f2:eb:15:71:
         c0:d9:fd:8a:c3:7d:7b:fb:8c:30:c7:c9:be:2e:f9:41:b8:9e:
         18:b0:0b:c0:42:7e:bf:da:60:24:26:43:01:37:22:38:3e:79:
         4f:a5:3a:51:fc:24:62:04:49:b4:5d:4b:ee:19:cc:44:d4:98:
         c8:be:ac:b3:f6:6a:27:5d:e0:e8:27:f5:e7:74:8a:8a:33:9f:
         2f:7a:c4:a7:8b:5b:e2:24:22:19:d0:82:59:12:e4:89:bc:f6:
         9a:1a:5e:11:ab:fd:fb:1e:ca:12:5f:79:93:db:5b:8c:24:61:
         61:0d:e9:5a:fc:47:ee:88:6c:24:b6:20:e5:e0:92:52:2e:5d:
         21:ed:d0:88:ea:a8:40:77:1b:b0:99:e1:a4:ba:76:b4:05:01:
         87:e2:c2:6e:ec:32:cc:7e:e4:60:a0:9d:7b:87:cc:8e:9a:7a:
         00:79:9c:31:97:be:93:8e:6e:0c:7e:74:9f:26:84:f4:f2:ee:
         d9:cc:98:c8:d2:aa:46:17:a6:f8:30:17:77:65:2b:a5:36:7f:
         f5:52:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:24 2025 by rpki-client