Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa
File:                     fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa (raw, json)
Hash identifier:          BKUdOtRdG4ZI5E8yLnzLwhUJlV417dezau2g+I+REEw=
Subject key identifier:   C4:C8:EF:9A:D7:6D:DD:7B:9E:BC:F7:70:A0:02:F1:7F:0A:9F:2E:DC
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F4328584A6825FEB86A5AC8DADFA92D00
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     7752
IP address blocks:        2604:5000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fe:b8:6a:5a:c8:da:df:a9:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d67e85e8-f13a-481c-92d6-d4cb7e6f7b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:09:9c:ef:19:fa:da:d5:39:87:3d:ed:00:
                    3e:4e:18:15:bd:c2:2a:76:e7:56:ed:79:ec:29:b5:
                    33:71:f4:b4:5a:89:bc:bb:ac:ce:fc:80:55:b2:fc:
                    8d:56:29:e7:f2:ad:22:ac:2d:c8:be:9f:5b:84:53:
                    f6:4d:e1:0c:f3:99:13:ff:d0:1c:9e:3d:50:e6:89:
                    a8:e3:9a:e2:f6:1e:0f:86:c9:39:a5:45:49:fe:53:
                    7f:d0:e5:12:1d:f8:aa:93:ea:bd:dd:f3:37:7a:9d:
                    db:e5:49:c1:31:33:8a:23:bf:3d:91:b8:79:dc:ed:
                    88:05:32:03:82:bb:b0:db:44:25:4a:a6:88:f2:ee:
                    da:1c:9e:df:b5:b7:57:f7:28:74:f7:24:c6:f4:ef:
                    e9:d8:9d:41:ab:7f:7c:ad:ae:cd:74:47:52:5e:56:
                    32:d7:bc:06:29:9a:6b:df:13:b1:15:b4:43:e8:df:
                    f2:93:93:cb:08:dd:d8:10:17:8f:28:3f:30:9e:0f:
                    99:b6:b3:80:3f:89:8a:93:bd:3a:30:b9:f4:2d:6f:
                    ae:d5:83:6e:55:19:2a:43:22:f1:87:cc:f2:87:4c:
                    50:16:a0:7a:22:5e:eb:47:da:88:cb:c0:f3:de:d5:
                    d2:be:6a:3b:0a:8c:cc:9f:75:8e:a7:bd:f2:fc:da:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:EF:9A:D7:6D:DD:7B:9E:BC:F7:70:A0:02:F1:7F:0A:9F:2E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:3a:c9:aa:12:95:f0:9e:13:e8:2a:a5:f8:a6:2e:8d:7a:87:
         97:38:43:73:27:71:ea:fa:fb:17:ea:1d:03:85:15:ee:c4:98:
         68:9d:88:35:03:b9:7c:36:51:aa:fa:8b:ae:b6:aa:0a:8e:eb:
         9f:24:db:e3:35:4d:9a:5b:ad:f7:c0:9a:31:bd:ce:d7:36:c9:
         71:ba:99:94:2e:6a:37:8e:4f:1e:d4:7a:a7:1c:6a:32:f6:75:
         50:12:45:a8:38:6d:e7:d5:27:0b:d6:22:ac:4d:d5:08:3e:00:
         73:af:33:24:4f:78:99:75:9d:da:e6:3e:d7:14:83:b2:17:ff:
         02:b0:76:4a:d7:78:ac:46:ce:44:93:ec:92:66:51:da:08:98:
         5e:53:a6:7c:b3:a2:db:4f:55:aa:5c:64:f5:da:b1:62:82:28:
         10:2a:1a:7a:ef:99:61:2f:14:3e:b3:0b:36:98:0e:54:1e:cb:
         84:8f:1b:25:21:c9:dc:98:c6:cb:cf:08:b1:78:9d:37:75:4c:
         16:a0:7e:94:f6:f2:fc:23:10:71:08:3a:3c:fb:57:46:ac:e4:
         92:a2:e0:54:f1:d6:68:31:d7:41:87:1c:12:c3:f2:41:74:5a:
         1d:3b:38:a2:ff:9b:eb:6f:e5:6a:be:92:86:5d:d6:8e:7a:ba:
         77:4a:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:40:02 2025 by rpki-client