Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b44554ce-039a-382d-8e28-e307a26f2d07.roa
File:                     b44554ce-039a-382d-8e28-e307a26f2d07.roa (raw, json)
Hash identifier:          lwDTAaHPz///+Hdp2RaHjCgrSQw7GP8IQ/lONMs4NNA=
Subject key identifier:   F2:8F:19:E6:2D:79:5A:3A:7D:BE:7C:CD:6F:76:66:11:CF:2D:93:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C024016101DD51572CDA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b44554ce-039a-382d-8e28-e307a26f2d07.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100a:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c0:24:01:61:01:dd:51:57:2c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=fbfd94b5-897d-4771-a61d-aab2eb780979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:d8:be:e7:62:29:7e:b3:71:4d:ce:bf:c2:
                    29:9f:f5:10:d9:e8:1f:77:df:be:3a:5d:a0:b3:1e:
                    e6:fa:2e:ec:5b:45:f1:a1:b7:7e:60:e5:9f:9f:f1:
                    a4:9b:8e:92:68:d0:86:d1:91:21:e3:6f:79:89:16:
                    0f:8a:4c:a3:3c:4d:39:68:e5:bd:ae:d8:fe:5c:16:
                    4e:c4:ef:ce:1a:a7:ed:79:dc:36:a1:a9:c4:be:0f:
                    e0:46:0f:20:ed:87:af:4b:bf:d4:ae:6d:6a:ac:8c:
                    9f:84:7c:4e:fa:e5:21:33:0d:47:6f:55:58:04:a9:
                    f0:98:cb:d4:91:2e:d4:b8:b8:95:69:35:e6:77:7f:
                    bc:c4:ce:d0:47:eb:49:68:88:93:68:d4:06:08:74:
                    15:eb:b1:ae:1b:cc:b9:6f:13:c9:30:06:7a:37:c6:
                    35:b2:f3:0e:c0:d5:42:96:a7:f1:4a:e5:31:33:6a:
                    cb:5c:d3:42:84:32:ce:a9:9f:4f:b2:f4:4f:6f:18:
                    e2:ce:4a:2d:4e:06:4c:6d:88:58:15:67:43:d5:14:
                    91:fc:4b:d7:f0:ec:a0:64:52:98:2a:1e:d1:02:35:
                    a7:78:4e:79:c4:04:91:74:2a:46:d7:81:cd:38:ab:
                    f4:4e:45:ca:13:50:e9:0f:ac:36:5f:d5:f2:f6:05:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8F:19:E6:2D:79:5A:3A:7D:BE:7C:CD:6F:76:66:11:CF:2D:93:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b44554ce-039a-382d-8e28-e307a26f2d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:72:52:b5:fe:61:aa:03:ea:c3:c6:33:84:3d:19:42:fa:
         b2:5e:06:bb:91:c7:05:ba:18:6f:cc:13:62:8b:0f:54:24:03:
         ce:99:88:62:69:0f:c1:ee:8e:af:e1:c8:6d:ec:f6:2d:b1:24:
         8f:f2:14:78:c4:5e:61:8d:40:24:a1:1c:a4:87:0d:18:a4:f1:
         67:5d:df:eb:c7:0d:03:4b:f7:8a:1e:93:d2:5c:db:a7:87:1c:
         57:74:ca:5a:b6:7d:31:10:b1:94:27:88:b1:18:56:b2:78:9c:
         a4:cb:bf:86:d5:07:68:f0:3e:2b:da:b2:fb:0d:88:af:8f:09:
         12:c3:f4:bc:a4:a9:3f:dd:6f:c0:82:18:02:13:ab:da:a7:f5:
         42:be:a4:d3:ed:58:84:3f:47:5a:4d:da:f5:22:bd:b7:f7:ed:
         09:ff:1f:26:f9:b7:64:86:f3:80:01:50:27:0b:e1:15:fb:17:
         b3:73:38:24:a6:a9:1e:ea:ed:41:8f:de:4e:43:37:9d:05:b0:
         0f:2f:1d:0f:cd:81:7e:ce:0c:db:eb:aa:c0:37:bd:03:6c:f6:
         82:8e:0d:23:db:b6:23:ce:fa:48:a0:f1:f7:3a:29:7b:5a:e3:
         8c:7c:be:51:3b:9b:80:e0:2d:e3:f4:ae:cf:e4:ff:36:3b:47:
         14:a3:32:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMAkAWEB3VFXLNowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZmJmZDk0YjUtODk3ZC00NzcxLWE2MWQtYWFiMmViNzgwOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp/YvudiKX6zcU3Ov8Ipn/UQ2egfd9++Ol2g
sx7m+i7sW0Xxobd+YOWfn/Gkm46SaNCG0ZEh4295iRYPikyjPE05aOW9rtj+XBZO
xO/OGqftedw2oanEvg/gRg8g7YevS7/Urm1qrIyfhHxO+uUhMw1Hb1VYBKnwmMvU
kS7UuLiVaTXmd3+8xM7QR+tJaIiTaNQGCHQV67GuG8y5bxPJMAZ6N8Y1svMOwNVC
lqfxSuUxM2rLXNNChDLOqZ9PsvRPbxjizkotTgZMbYhYFWdD1RSR/EvX8OygZFKY
Kh7RAjWneE55xASRdCpG14HNOKv0TkXKE1DpD6w2X9Xy9gX00wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPKPGeYteVo6fb58zW92ZhHPLZOvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjQ0NTU0Y2UtMDM5YS0z
ODJkLThlMjgtZTMwN2EyNmYyZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCrFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAICrclK1/mGqA+rDxjOEPRlC+rJeBruRxwW6GG/ME2KLD1QkA86Z
iGJpD8Hujq/hyG3s9i2xJI/yFHjEXmGNQCShHKSHDRik8Wdd3+vHDQNL94oek9Jc
26eHHFd0ylq2fTEQsZQniLEYVrJ4nKTLv4bVB2jwPivasvsNiK+PCRLD9LykqT/d
b8CCGAITq9qn9UK+pNPtWIQ/R1pN2vUivbf37Qn/Hyb5t2SG84ABUCcL4RX7F7Nz
OCSmqR7q7UGP3k5DN50FsA8vHQ/NgX7ODNvrqsA3vQNs9oKODSPbtiPO+kig8fc6
KXta44x8vlE7m4DgLeP0rs/k/zY7RxSjMiU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:48 2025 by rpki-client