Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/442d46dd-d5c2-308b-9c55-2ccd7d26857f.roa
File:                     442d46dd-d5c2-308b-9c55-2ccd7d26857f.roa (raw, json)
Hash identifier:          y7BWHlv95iNufb87Yk6DE8nDBfwFNVHzwZAjh7LeEQ0=
Subject key identifier:   38:15:DE:39:4B:24:3F:40:54:EF:23:1C:5C:34:6A:5C:63:CF:FD:67
Certificate issuer:       /CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3
Certificate serial:       010D0C9F4328584B3C51B63F137BA5E6CB297610
Authority key identifier: 50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/442d46dd-d5c2-308b-9c55-2ccd7d26857f.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     401609
IP address blocks:        2602:f737::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b6:3f:13:7b:a5:e6:cb:29:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=eefb35fa-b982-4966-988b-d50c70a43abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:87:1f:ac:8c:bd:ca:7d:82:02:5a:f1:54:
                    5a:aa:5b:f4:9e:33:8f:ec:ae:1e:a1:32:73:f5:49:
                    0e:31:ef:38:a1:a0:40:55:59:55:8a:ea:5f:49:b8:
                    34:c2:89:83:ca:ae:e7:12:e0:08:5e:9f:1b:a2:74:
                    0e:4a:33:bd:91:e3:27:7a:af:4b:c0:30:f6:05:fb:
                    8a:d4:0d:df:a8:13:38:8a:8c:a4:16:e0:51:5f:4c:
                    01:98:56:50:46:7f:b3:81:ce:eb:80:18:42:60:ad:
                    96:e6:76:af:e6:9c:e0:68:b2:01:2b:d1:6a:52:91:
                    ae:d3:10:59:c2:e3:d3:ce:0f:23:36:10:fa:c0:ce:
                    aa:e1:c2:26:be:61:3c:65:f1:cc:c4:11:9f:1f:23:
                    f4:e0:62:34:11:0f:0e:f7:ad:4f:89:53:3e:8c:53:
                    d9:65:cf:3a:ca:da:bb:b6:97:62:18:dd:30:e9:a3:
                    1a:5d:c9:1d:18:70:44:33:e7:95:25:55:7d:6f:20:
                    96:46:cc:2f:24:ad:22:ad:27:cd:ca:42:e8:7a:1d:
                    01:6d:90:04:19:b9:f1:d3:6d:e4:d1:20:59:21:f4:
                    06:73:79:98:3c:87:a4:51:84:9f:44:aa:17:52:71:
                    9b:d3:32:99:f4:1f:04:b5:5a:69:19:c8:1a:9f:40:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:15:DE:39:4B:24:3F:40:54:EF:23:1C:5C:34:6A:5C:63:CF:FD:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/442d46dd-d5c2-308b-9c55-2ccd7d26857f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl

            X509v3 Authority Key Identifier:
                keyid:50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f737::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:f2:58:88:02:c9:5a:7a:a9:0d:3a:62:6d:d5:be:ee:87:
         12:76:0e:e2:78:91:46:a2:2b:4f:a3:7c:a8:db:8d:54:fd:e6:
         db:0b:5c:96:85:56:79:f9:60:9a:84:24:31:18:1a:c0:f8:5e:
         4e:7c:8c:bb:94:c5:4b:03:83:d9:81:c5:5a:08:02:fb:89:bd:
         3f:b8:36:58:77:dc:d9:1f:d5:30:0d:9b:03:4f:90:74:ef:d2:
         16:67:cf:72:a3:82:10:4d:b7:b8:3a:fb:44:12:48:4a:70:dc:
         9c:b7:c7:90:fc:85:a7:4a:84:18:f5:10:3f:db:27:6e:9b:07:
         9d:92:97:86:a2:e5:83:5d:a7:a9:7a:d1:88:37:f2:08:9a:a4:
         ab:16:93:4a:c8:53:c6:4f:b6:f2:ef:9e:9d:bd:fd:82:ea:da:
         e4:5f:f5:70:48:79:36:c8:97:a8:33:38:98:64:cb:bb:db:8b:
         b6:a1:d5:ec:ea:b5:e0:3a:96:71:99:62:9a:7b:d9:a2:c4:84:
         b7:7f:94:8c:d2:29:76:cb:2e:a3:91:8f:1e:f0:9c:4e:1d:22:
         59:e8:db:e2:bf:9e:b0:3a:48:3c:9a:93:87:35:23:1b:e0:20:
         7a:b4:a8:dc:66:15:fb:c6:88:bc:91:d7:99:5c:80:ac:a6:d8:
         1d:e4:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:27:12 2025 by rpki-client