Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
File:                     52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json)
Hash identifier:          +6dfjslgJkzJJ+XASeBrcgA9MR596ROuYroWH8gq6UY=
Subject key identifier:   93:78:E9:FE:58:F3:A2:64:D0:D7:89:59:F5:1B:84:01:4C:3D:5D:CC
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584B031691F912E938A75F94A500
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     26801
IP address blocks:        2602:fddd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:91:f9:12:e9:38:a7:5f:94:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=dd5f28aa-cbe9-4178-9e89-5bf6b99a825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:9d:fe:55:1b:73:d1:2f:f4:80:1e:5c:d6:
                    c9:43:9a:71:62:25:51:c5:11:92:7a:3c:07:4e:44:
                    88:db:29:71:cb:5b:f0:ea:cd:cb:74:46:17:b7:f8:
                    70:27:30:1e:99:67:fe:a9:4a:cf:31:15:6c:4a:5e:
                    4e:44:bc:7e:c3:1c:19:7b:b3:da:db:c7:55:ee:83:
                    62:89:38:83:5a:de:f9:45:2c:d4:fb:6f:f0:4f:f3:
                    f4:ca:8c:3d:c5:de:82:db:80:f8:6b:64:e2:33:1e:
                    ab:b0:ef:2d:ff:26:ab:5a:f0:a9:e6:b5:57:38:2b:
                    4c:81:f6:96:ac:2d:4e:06:97:7a:35:f2:06:70:81:
                    20:ed:a2:2f:1d:7f:63:9a:59:9a:e9:a8:3b:05:61:
                    ba:92:a2:26:27:99:59:51:a4:c9:39:bd:05:ab:8c:
                    2d:8f:94:2d:6a:79:c9:30:d3:18:40:73:10:ef:1d:
                    99:95:96:78:ea:3d:44:3b:44:97:18:7a:1d:14:bb:
                    e9:d1:81:0d:99:a3:6d:02:15:cd:91:cf:37:1c:88:
                    84:21:f8:01:0d:0d:fb:ab:6b:77:eb:a4:e7:0b:50:
                    af:ce:4e:fb:ec:fa:7c:f3:df:94:3f:ca:6a:f6:fd:
                    73:f4:1e:de:37:14:7b:f9:bd:91:49:92:af:94:97:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:E9:FE:58:F3:A2:64:D0:D7:89:59:F5:1B:84:01:4C:3D:5D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fddd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:6f:96:14:46:c2:93:48:83:1d:87:c3:b4:21:b1:de:4a:
         3d:ac:d4:fa:52:a2:b4:0c:61:41:3e:90:49:8b:62:87:51:21:
         35:d2:c8:7b:4d:0a:e5:25:6c:73:f1:6f:b8:7e:99:55:06:14:
         46:2e:09:53:53:f5:0f:0f:73:4a:c6:bf:46:11:1a:be:5c:9d:
         27:c7:9f:94:ad:9f:87:2f:00:61:f8:0e:11:bb:35:f3:34:2f:
         b4:5f:4e:c9:19:a3:fb:25:5a:60:61:68:86:a7:3e:a4:5a:cf:
         42:7f:85:53:cd:4b:4a:b2:d1:90:5e:c6:5d:bb:18:35:0f:1b:
         a6:a1:4a:0a:40:f7:30:41:1c:da:c9:2c:1a:46:35:be:31:c9:
         1e:06:4b:5b:81:e1:60:25:94:cd:68:9c:4d:25:4e:79:85:9d:
         8c:83:6c:7b:64:7c:a1:df:2e:62:d8:38:26:1c:89:8a:90:f6:
         1c:43:d6:9e:37:42:4e:91:6d:43:bf:e4:0f:a1:e2:27:c5:d1:
         f5:24:b6:10:33:12:f7:2e:dd:be:26:77:7d:5e:5d:47:08:0f:
         06:0b:0f:20:a6:bd:2c:6c:44:77:75:77:73:66:b5:be:46:5b:
         cb:56:7b:8c:69:ab:81:2a:d6:53:83:92:f0:02:39:3d:6b:f5:
         e5:2a:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:15:02 2025 by rpki-client