Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
File:                     829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa (raw, json)
Hash identifier:          h85DDjrRbjYPMgP2waHgx3bKyQifjbiINj0rPf8dU80=
Subject key identifier:   ED:1E:40:95:12:0E:A8:39:C2:4C:5C:DF:CA:3C:AE:64:2D:15:02:C0
Certificate issuer:       /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
Certificate serial:       010D0C9F4328584B76F22D1EFC193096A2148FC0
Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     398697
IP address blocks:        2602:fcdd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2d:1e:fc:19:30:96:a2:14:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=735cd7d2-9c09-4ba7-ba42-c3bf16fe15d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:7d:4c:81:81:eb:a2:29:c8:5e:58:99:75:
                    0e:a5:9c:43:a3:32:a9:ef:06:66:45:77:06:19:55:
                    6c:90:c7:68:6d:36:a1:e2:ca:3e:96:97:21:9f:8e:
                    c4:19:c7:0f:34:26:da:91:32:be:76:72:f0:7f:ad:
                    79:6e:f0:05:17:e2:00:0f:4e:dd:8c:4a:de:7a:e3:
                    68:56:68:a1:2b:8c:78:84:04:1d:9a:40:eb:ec:84:
                    69:1a:9a:cb:81:b7:7b:a8:1f:38:45:45:dc:ee:40:
                    98:b9:84:d1:f3:21:20:6d:b4:ff:ab:56:de:6c:b8:
                    b0:7e:6c:cd:9e:9d:00:24:96:8e:55:2c:57:bb:c4:
                    68:e3:25:d2:1d:59:c9:f5:63:ae:d1:b3:93:7c:bb:
                    59:3e:98:f7:5c:cb:eb:01:6a:72:a8:3e:2e:0d:5d:
                    cb:01:0c:c9:44:88:2a:75:ba:81:d0:b6:3c:c0:f6:
                    d2:44:be:c1:aa:e8:81:03:73:ec:fe:c6:d2:75:f7:
                    d0:bd:cd:f0:62:46:16:c5:70:4f:c2:ca:de:be:86:
                    e3:d3:7a:42:25:e7:1c:9e:ad:fe:14:ab:27:1c:e1:
                    49:bc:23:2a:21:c4:cb:ef:03:01:00:f5:a6:90:6b:
                    57:a0:88:61:f6:69:b0:39:eb:0d:3d:9d:77:a6:ad:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:40:95:12:0E:A8:39:C2:4C:5C:DF:CA:3C:AE:64:2D:15:02:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl

            X509v3 Authority Key Identifier:
                keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcdd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:65:f8:aa:3a:5b:17:5b:40:2b:0a:9d:38:a6:29:cb:62:38:
         df:10:09:56:16:c7:94:c8:e1:fd:14:2c:ce:b9:33:ed:e9:0e:
         7f:9c:a0:33:c3:58:a8:cc:78:e0:e2:dd:f5:92:9e:25:97:49:
         60:e3:2d:d2:09:94:06:b3:5f:54:a8:4d:6f:6e:06:b0:ad:16:
         b6:f0:a8:db:4b:e4:a3:99:c0:22:84:f8:67:21:df:bb:0b:1e:
         98:a4:ee:a7:0f:8a:d3:d9:1d:c5:26:cf:14:9d:db:5f:d0:68:
         54:36:55:31:9d:a7:ee:24:9d:07:fb:f9:87:3e:d0:ee:f4:d9:
         b7:bd:eb:32:96:3d:c4:e4:59:15:75:a6:35:39:d1:d6:ca:e1:
         08:0f:67:3e:f8:b1:69:31:b3:0a:18:3f:39:4d:ac:f4:da:56:
         d6:e6:57:e3:82:99:0d:1b:72:8b:2a:68:22:84:9a:06:91:a2:
         fe:c1:ac:b6:dc:e5:9d:28:23:36:40:6b:e2:a4:f8:27:b5:18:
         a4:b7:66:87:53:ac:25:ab:65:41:e2:7e:9e:f0:21:8d:b0:03:
         bb:c0:86:ea:6d:7c:62:1a:b1:bc:26:7c:ae:94:6b:a5:13:fd:
         25:e8:9b:a0:b4:7e:25:2a:c2:71:56:ce:11:87:b3:2d:f1:e3:
         6f:2a:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:32:43 2025 by rpki-client