Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa
File:                     ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa (raw, json)
Hash identifier:          YXwtIRP6xmfaSvJXsLn0I1ftZ0v9nm4eLzvbMNbVEwU=
Subject key identifier:   B0:0C:11:7D:97:05:C9:75:FA:F9:F0:6E:99:0B:9E:F0:CC:27:D5:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AC03E690912AB73812C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:fe00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ac:03:e6:90:91:2a:b7:38:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c0af7cd9-0e96-4832-a432-567a0c866715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:48:56:d7:64:15:80:c2:db:d7:b6:1b:d3:
                    66:20:a3:b8:ad:af:ad:e2:14:3f:13:ff:1f:70:46:
                    8c:b8:79:65:4c:0b:5a:45:5a:92:19:06:d2:b3:14:
                    03:e6:62:17:cf:0a:f8:d2:78:a0:6f:ec:dd:94:5e:
                    18:69:40:6c:c9:4f:31:5d:bb:99:43:6d:2b:e6:da:
                    5a:37:20:67:cd:21:e9:0c:1f:55:2f:94:78:17:1c:
                    f8:bc:5f:ba:1a:8a:b8:93:84:25:5d:9c:c4:0c:13:
                    61:ee:43:44:c8:6a:95:0f:16:02:8a:8b:bd:37:f6:
                    9a:68:7b:eb:2a:ea:51:dc:9b:2c:94:7e:53:12:30:
                    6a:89:7f:a0:04:94:f6:70:60:a8:00:2c:57:2f:60:
                    df:56:96:8c:72:bc:3d:3b:d8:cb:4f:24:26:9d:60:
                    e0:a7:d7:7e:c7:f6:af:de:8b:de:45:88:42:24:92:
                    9c:74:cf:e0:31:70:9f:d8:f0:bb:1e:66:47:6c:e0:
                    6d:b3:e4:03:4b:68:ed:d3:2a:d6:f4:68:81:40:7c:
                    45:2b:12:eb:d1:74:cd:94:55:87:9c:ef:3a:75:87:
                    ea:9e:8f:74:03:41:e0:f0:fa:fb:97:a8:ea:cd:79:
                    fb:6d:59:5b:7d:1e:b3:f6:6f:16:30:ef:53:12:c0:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0C:11:7D:97:05:C9:75:FA:F9:F0:6E:99:0B:9E:F0:CC:27:D5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:fe00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:81:f8:a4:c7:1e:08:85:12:18:8f:fd:75:61:3f:95:97:
         80:5a:97:3b:3c:96:cf:6f:fe:fe:36:c3:3a:4b:d6:08:83:89:
         51:3d:82:f8:59:e2:e5:0b:e1:3f:07:92:a4:d1:c3:98:9a:ef:
         27:5d:e4:2a:c0:17:cc:8d:cf:f2:f4:e5:22:31:eb:60:8e:7b:
         7f:39:bf:6a:b7:c6:15:e5:5e:d6:2a:37:70:ac:a6:6e:bf:77:
         1c:66:61:c8:79:cc:58:30:a2:be:cf:82:bc:a6:db:a5:e4:b1:
         d9:36:e8:63:d3:b6:73:25:aa:9e:3f:97:1e:b7:eb:0f:31:14:
         00:b4:0b:e6:37:6f:0a:f4:d8:b4:40:12:8d:61:14:05:e2:04:
         3a:7b:e2:ac:7f:09:8f:b7:35:dc:d3:cf:f8:fe:65:de:08:35:
         05:37:3b:bb:bd:62:f4:d7:16:4c:5f:61:11:75:01:e6:4e:0d:
         f4:b2:74:fe:d3:ac:42:91:c3:b5:45:bb:61:ce:32:a3:ce:25:
         a6:99:f4:70:82:a4:14:fe:24:38:c0:19:84:12:6e:f2:ff:67:
         31:2d:64:15:b3:a7:14:2a:7e:e4:17:d3:5f:1a:6a:e5:a6:69:
         69:68:39:4a:bc:26:e1:fa:4e:64:ac:43:99:f3:fb:09:8e:33:
         de:b8:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:37 2025 by rpki-client