Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a5dc09-1194-38ab-8b4a-405c0e704ac3.roa
File:                     b8a5dc09-1194-38ab-8b4a-405c0e704ac3.roa (raw, json)
Hash identifier:          M3eDYZod+Kt14VuebDkjYy2c/oLU+ty+3hE60N76Pf8=
Subject key identifier:   91:1B:6E:56:85:FC:3D:12:8B:20:C5:DB:FB:8E:DB:70:6F:39:B9:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB5C26D4118ECCC9BE8475600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a5dc09-1194-38ab-8b4a-405c0e704ac3.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        2600:1007:d070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:6d:41:18:ec:cc:9b:e8:47:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=786705a3-69dc-45b0-be25-e7b8f9370e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:03:74:9b:bc:7a:5f:27:5c:8a:90:34:1f:
                    a8:67:73:b3:65:b8:61:a1:22:1d:ba:82:1f:23:71:
                    d8:3d:8f:5d:e0:e3:1e:85:82:f3:1d:e9:ae:ad:f3:
                    4c:34:b6:d9:f8:d0:b3:56:50:9a:f0:51:b3:32:97:
                    5b:cb:8a:11:f4:8d:62:0a:52:71:ff:0c:e3:ad:10:
                    94:c8:05:04:db:d3:af:88:18:dc:24:30:70:34:cf:
                    f0:62:c2:47:02:2a:a1:7c:f4:ba:2c:b8:18:45:15:
                    0b:33:cf:e6:ce:dc:80:12:a5:f8:05:cb:39:7c:78:
                    a0:f3:ef:e0:bc:7c:c6:23:52:68:a9:a4:04:25:7e:
                    f1:0e:bc:10:a2:78:9e:80:55:06:7d:10:be:b1:d9:
                    66:46:bb:92:41:db:96:ea:c7:7e:11:63:bc:bd:37:
                    98:ef:69:82:27:3b:d9:3c:96:31:74:88:37:6e:82:
                    10:75:97:5f:60:3d:17:15:59:7a:d6:0b:b4:fc:da:
                    a8:5a:09:03:79:81:5a:a1:93:a2:a8:7e:ef:d3:f3:
                    0c:a1:36:f6:e5:93:b1:3f:7e:7d:78:70:ae:96:e4:
                    03:48:0e:6b:b8:39:bb:6f:36:08:97:26:4b:e0:b8:
                    fe:f5:6b:cf:ef:d3:10:88:82:82:80:a1:19:ac:33:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:6E:56:85:FC:3D:12:8B:20:C5:DB:FB:8E:DB:70:6F:39:B9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a5dc09-1194-38ab-8b4a-405c0e704ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:d070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:35:33:80:7c:0d:38:99:de:c7:b4:fc:da:ab:77:53:f6:8a:
         5b:dd:29:08:98:36:87:1c:b9:f5:92:a2:0c:49:9e:c2:c9:71:
         a8:18:9f:a3:ad:18:7e:4f:39:12:34:c6:4b:19:52:b0:dc:9c:
         97:25:bc:c9:59:53:69:79:43:bf:bb:cd:82:56:25:9b:a5:34:
         c9:68:36:2c:ce:80:f2:f4:63:98:6f:75:89:a9:95:a5:da:73:
         6f:78:5b:3f:e9:3c:b1:d4:e7:17:8b:6f:dd:d4:e4:e6:38:26:
         d0:51:d4:ae:e7:18:8b:c0:2e:0d:7c:bb:04:ec:6f:53:e2:b6:
         ed:45:0b:d1:26:5d:6d:c6:fa:e9:3c:2d:af:f0:04:ef:c9:f7:
         0d:2d:55:2b:8b:1b:09:e9:94:06:c8:64:d9:85:ac:e4:2f:f1:
         6b:76:41:bd:71:19:c9:06:3b:55:fb:fb:28:ea:ba:85:f2:b0:
         f0:7c:ad:09:10:8c:50:6c:4d:d3:39:ac:c0:2c:8f:aa:37:5a:
         e5:bd:71:57:fd:bd:7d:b3:c7:5d:a7:48:b7:be:0b:40:c3:27:
         ac:09:22:f9:b7:25:0a:b3:c8:c0:cc:9a:ed:77:13:5f:40:d9:
         41:bb:48:19:2d:3d:20:32:2b:8b:2d:cb:3e:b2:f7:34:1f:37:
         1f:d7:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:43 2025 by rpki-client