Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/eeca86f7-c0a2-3e51-ad0a-f3af26c56548.roa
File:                     eeca86f7-c0a2-3e51-ad0a-f3af26c56548.roa (raw, json)
Hash identifier:          zKhVI6/+9lHyOGAkDaI364bkvz+dozq8krAt91Q62cA=
Subject key identifier:   1A:E7:E9:62:E6:BE:35:0D:3E:1E:AF:22:90:33:53:71:79:1E:22:5B
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584B153C1DA4551FBBD507B60000
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/eeca86f7-c0a2-3e51-ad0a-f3af26c56548.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     36530
IP address blocks:        2602:f864::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1d:a4:55:1f:bb:d5:07:b6:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=8e95dabf-a6e1-4570-9a86-6b1276708bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:65:42:44:1a:41:cb:76:0b:ac:9f:f0:db:
                    9e:67:95:30:82:97:d4:a6:b6:0f:45:b9:a9:b3:0c:
                    8d:06:98:f9:aa:c1:71:15:a4:9b:61:79:67:9e:25:
                    ee:47:75:c9:f6:0f:1d:53:d9:23:c0:3d:a7:a7:06:
                    64:ba:9d:1f:29:e5:c0:c6:fe:1d:66:9b:d5:e9:f5:
                    45:52:d3:e9:5e:66:07:5c:15:b0:be:44:a6:1d:49:
                    ad:01:0b:b1:57:e8:33:85:d5:9e:6c:ab:2e:32:95:
                    6d:b2:de:45:f9:be:72:55:57:e0:ee:2b:1c:74:d6:
                    6f:df:05:99:a9:54:4e:1f:fd:36:76:93:27:a9:a8:
                    3b:b7:cb:70:39:24:df:db:61:72:87:88:21:a9:87:
                    1e:f0:5d:9a:2a:8e:72:e2:7a:49:40:f5:0a:03:e6:
                    aa:5f:de:4c:99:7b:ef:ca:19:ac:f3:22:3d:f6:64:
                    4b:c6:89:52:06:af:68:64:e9:82:94:c5:f9:29:58:
                    13:90:f8:81:19:47:e8:24:98:9a:46:76:9e:62:b1:
                    48:3a:49:c5:67:b7:e1:c2:b0:c7:72:50:80:0b:fa:
                    c3:24:26:29:6a:5e:b7:a3:e5:34:4a:a3:34:4c:f7:
                    e1:94:00:73:ec:f7:4d:74:a4:3b:bf:91:1d:a1:f3:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:E9:62:E6:BE:35:0D:3E:1E:AF:22:90:33:53:71:79:1E:22:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/eeca86f7-c0a2-3e51-ad0a-f3af26c56548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f864::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:da:b5:54:0a:22:fd:21:ab:3c:c0:ee:29:8d:91:7e:f6:25:
         be:54:d2:21:60:13:e8:0a:e3:04:fc:80:67:ef:7e:af:11:f3:
         02:02:ad:e9:b2:b4:97:c2:ea:a5:be:0e:27:22:5f:b9:d9:cf:
         77:31:64:67:78:44:3f:1c:3e:9b:40:ee:61:3e:d7:9f:97:ee:
         cd:1a:c8:63:7b:ba:9c:df:a6:1c:1b:b3:97:cb:b8:b0:94:fd:
         a6:df:de:53:ee:15:b9:aa:36:72:4d:b8:98:cb:d5:32:31:5f:
         b4:a4:a7:c8:a3:d6:9b:2d:be:de:fc:21:c3:18:1e:2d:a0:6f:
         1e:75:4b:b1:20:41:7a:fa:11:a5:ab:5f:c2:e3:a2:be:1c:7c:
         ac:d7:da:b3:57:0b:6f:36:8f:49:c5:50:73:bc:e6:76:fc:0f:
         de:69:3d:6f:1a:c1:d2:bf:6f:ae:33:0a:f3:9e:71:81:42:49:
         43:89:44:59:df:a1:de:3f:65:80:72:8e:a8:f1:ab:d3:65:ec:
         af:7b:4d:81:2a:74:a0:0b:03:31:6f:a6:6c:ed:ad:a4:a2:9e:
         72:3b:9c:2a:d7:3f:0b:83:03:59:13:08:0c:5d:ce:3b:68:f9:
         1c:49:25:10:2e:05:bc:0b:60:67:18:b8:97:78:b3:8c:2d:a5:
         75:c0:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:43 2025 by rpki-client