Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
File:                     f8fe083d-baed-30a1-8518-ee28ce1ef020.roa (raw, json)
Hash identifier:          T6ZCHJO1TFNGNQpTlGDzqILnTPrtNNJbtMuiIP0kJqc=
Subject key identifier:   D9:27:CB:16:B7:DE:F2:D8:6E:0D:DF:EA:6A:AF:5D:C2:B5:2C:4B:7A
Certificate issuer:       /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Certificate serial:       010D0C9F4328584A6DBB433CD541C1DE19B375C0
Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     394256
IP address blocks:        2602:f95a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:43:3c:d5:41:c1:de:19:b3:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=a26cdb19-4816-4660-a28e-cb2de7672a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:ce:98:b0:44:94:3e:ca:be:9f:2e:7d:2c:
                    12:e4:bd:ec:a9:28:d3:65:54:36:0c:51:e8:e4:87:
                    e0:4b:21:60:d2:99:d1:94:99:ae:80:c5:3d:29:4f:
                    dc:6d:62:e2:b9:ad:f7:62:d2:ce:c8:54:6c:58:a0:
                    a8:a9:83:07:e2:41:aa:5b:f7:dd:dd:fd:33:36:f4:
                    1a:18:ff:ac:bd:6e:65:99:3e:1c:cb:6a:93:41:97:
                    3d:6a:07:d1:ec:e9:e5:f8:b1:96:75:29:bc:e6:35:
                    d6:d0:07:97:78:39:d0:25:d2:ac:1d:73:6d:a8:d5:
                    2e:5f:56:ad:f1:d2:c7:04:cc:f4:bc:ff:1a:09:6f:
                    17:59:80:e6:89:21:24:91:ba:5b:22:59:f3:0c:e3:
                    e1:04:5b:84:54:e6:10:3a:81:b3:21:60:68:a1:5a:
                    39:fe:93:4f:5a:ea:50:19:05:18:85:e6:d8:e5:0f:
                    11:44:e7:85:0c:91:9f:f9:ac:f3:bb:57:aa:db:4a:
                    2b:a4:92:3e:95:00:25:89:51:12:c1:be:1f:ba:2a:
                    c3:1b:3d:a4:70:9d:2e:6d:a4:c0:fe:d1:4c:61:33:
                    1b:3e:4c:35:58:74:e6:86:8a:c5:6e:65:6f:38:2b:
                    0e:59:bd:1c:1e:3b:83:b5:51:05:df:d9:0f:c3:6b:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:27:CB:16:B7:DE:F2:D8:6E:0D:DF:EA:6A:AF:5D:C2:B5:2C:4B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl

            X509v3 Authority Key Identifier:
                keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:af:d0:39:25:1b:8f:cf:7c:c6:49:39:6c:aa:e8:3f:3b:
         0c:ee:bf:19:5f:17:ad:a1:e5:76:8f:12:be:6a:30:cd:7a:f6:
         7a:9c:b1:72:8f:74:24:50:b2:57:29:be:e1:3d:d0:70:99:37:
         ca:7f:c0:71:dc:ea:23:b5:93:2b:28:a1:4f:03:70:0e:f3:b6:
         52:af:04:a5:4d:29:d6:4e:d9:03:31:a5:b5:06:0f:3a:40:ed:
         f6:63:65:04:69:25:d9:2d:53:26:e3:70:28:cc:4f:09:e5:ec:
         06:b7:ed:a9:4e:57:8b:4f:45:08:7d:ed:a0:32:29:34:d0:5c:
         78:41:15:93:ab:47:00:68:50:e9:2c:69:62:3d:6c:84:08:81:
         43:b8:a0:2b:0a:05:06:11:56:2f:0f:67:2f:a5:e8:9e:0e:53:
         b7:4a:2e:08:6a:98:37:16:cd:84:c6:8c:07:f8:17:e0:a4:84:
         ac:2d:5c:57:66:ff:df:12:d1:09:dc:e0:f2:92:01:5e:ad:d1:
         a2:16:cc:16:04:67:81:89:9e:c9:4f:81:63:cf:8c:b2:e1:e1:
         3d:5b:77:6d:dc:27:f4:1e:58:74:c5:91:54:94:6c:52:e9:af:
         39:d9:43:76:3b:0b:c7:fc:d2:39:89:3b:ff:c0:e7:4a:ef:54:
         24:d9:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:38:29 2025 by rpki-client