Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa
File:                     36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa (raw, json)
Hash identifier:          cblTCioFNBwU3IOqCmRsdQO5vnmyuzIDRSYhlvTNgGI=
Subject key identifier:   46:97:11:75:23:91:E6:E5:58:A3:66:54:4A:B4:E0:F1:5D:6D:EC:59
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584B0CDC12F3ACC32745295AF700
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26411
IP address blocks:        2602:2dd::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:12:f3:ac:c3:27:45:29:5a:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=801b3877-a826-4165-8663-dc03859b269d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:6a:d5:32:e7:a7:fd:b0:c2:07:8d:c1:4a:
                    0e:9a:51:e7:5b:38:c9:12:3a:17:97:1e:cd:ba:4e:
                    ef:1b:f8:32:42:e6:c1:da:8b:64:59:6b:5e:bc:fc:
                    d1:e8:8a:24:04:b3:e0:f4:76:44:11:2d:d8:d1:4a:
                    ba:7c:b3:9e:b5:ce:24:5e:02:0e:36:b6:17:56:c0:
                    b2:a2:dc:ec:8d:5c:b6:2f:e3:b7:0e:6d:06:f7:11:
                    51:c7:75:ea:93:fb:7f:bd:3f:19:17:66:1f:db:fa:
                    ad:58:76:99:45:97:f3:fe:ca:54:ae:98:09:53:50:
                    e3:bd:3b:af:44:70:43:2b:f5:11:a6:02:df:95:24:
                    8a:ea:98:4c:c0:67:88:b6:39:7a:a2:0d:aa:fd:ab:
                    e4:c0:8a:30:ae:3d:24:d8:17:53:e1:d7:67:82:48:
                    c3:14:3e:74:23:82:4f:9a:86:fb:d0:33:c4:99:97:
                    f1:51:5c:96:28:cf:5c:d5:ba:3b:b0:de:59:c3:2b:
                    94:f0:85:a4:1a:f9:69:e2:a0:76:32:28:0a:b1:57:
                    17:40:98:f3:63:03:9e:15:a5:b8:6c:54:6a:d3:ef:
                    cb:d4:00:f9:13:4b:e7:a2:eb:6f:41:ec:d0:2a:4f:
                    8d:13:2f:a3:7a:1e:bc:71:30:f5:0d:3b:67:ca:c5:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:11:75:23:91:E6:E5:58:A3:66:54:4A:B4:E0:F1:5D:6D:EC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/36bb3a37-43e7-3dec-9cb4-ed0aaea8cd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2dd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:5b:7f:5a:58:b8:e6:05:e8:96:0f:8b:68:89:51:88:84:
         09:65:57:8d:5f:63:76:e3:fd:3d:29:ec:e5:56:33:a5:2a:9c:
         db:61:f1:7f:a1:dd:c8:4c:b8:a2:81:f0:ee:0b:d6:b1:c2:6d:
         c2:25:90:b1:fd:8c:40:88:4b:8e:10:a4:ba:75:f3:1c:8e:a0:
         db:54:4c:6c:3c:0f:16:a4:fa:15:e8:6c:48:a2:3b:19:ed:d2:
         a3:0e:46:5f:3c:48:64:ef:79:c6:84:ad:ad:4c:af:9a:2b:d9:
         4c:ce:23:9f:c2:9d:4d:7f:ce:d3:70:5e:fb:6e:7d:46:cb:bf:
         a5:43:3c:3a:f2:32:1b:8d:8b:99:ca:13:eb:87:d0:52:56:68:
         64:ce:7f:62:90:ba:87:e1:a3:5a:dc:a6:e1:f3:a7:d6:cc:c0:
         5e:36:73:10:93:06:ee:a6:cf:b5:a8:0d:d0:cc:45:46:75:50:
         1d:fb:5f:a2:bb:43:3e:88:55:a7:30:68:06:f3:36:40:7c:3a:
         9c:3d:2e:6e:b2:e1:ee:f9:bf:b5:74:17:09:0a:06:39:18:be:
         f0:c9:3b:8c:c3:12:97:0a:50:eb:58:24:2f:88:79:9e:80:14:
         fe:63:59:4a:2b:28:a9:be:f0:8f:c9:17:83:9e:fe:65:f2:ca:
         2f:7b:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:36 2025 by rpki-client