Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
File:                     08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa (raw, json)
Hash identifier:          HlmDbxBT5ledVreRaXXVB4orLD96swbvPeWfxhZmesk=
Subject key identifier:   11:05:4D:13:98:4C:26:86:FD:60:BB:13:CF:16:F2:3F:66:09:A4:0B
Certificate issuer:       /CN=38f0cd1a-37b5-4e21-a451-606bf424f495
Certificate serial:       010D0C9F4328584ECA6C71188DF3334CD0083680
Authority key identifier: 9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     26737
IP address blocks:        2602:f894::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:71:18:8d:f3:33:4c:d0:08:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f0cd1a-37b5-4e21-a451-606bf424f495
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=4a5732e8-a968-4007-b92a-d3816a2eb176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:3a:e0:59:15:a2:5c:69:a4:f9:d4:63:48:
                    af:0f:73:7b:4c:08:d2:7b:10:17:a0:88:0f:5a:e9:
                    8b:6a:fb:8b:1f:7c:12:24:db:12:4b:1f:03:ec:7f:
                    15:39:31:42:6f:67:ae:07:5d:fe:96:d9:f6:7a:c5:
                    05:66:9e:a5:a4:63:a3:fb:a4:d2:ca:a8:84:05:92:
                    c9:8e:f6:29:54:7f:53:7e:2b:20:44:86:4c:2e:23:
                    79:9e:15:8a:40:e7:5c:74:31:7f:9a:dc:5e:5b:8b:
                    8d:fe:83:ca:f5:f8:5b:f4:ce:72:84:6c:8a:57:10:
                    3d:ea:36:c1:c2:40:36:5d:6e:6d:b9:55:d2:d9:49:
                    55:6a:ba:5b:f2:3f:ab:c3:b6:79:52:28:b7:df:8b:
                    d7:41:94:51:a6:dc:16:cb:2b:82:dc:4d:df:e1:83:
                    94:53:d5:b8:a5:3d:76:5c:2b:7e:b8:9e:65:6f:32:
                    79:fb:16:0d:c2:3b:e7:95:59:c2:46:f0:61:68:ad:
                    93:83:f6:8e:df:7e:9a:ae:b4:a1:a8:31:2d:f7:67:
                    a3:ad:ca:07:8b:77:8b:55:b5:5a:0e:96:4a:9f:93:
                    b3:88:30:0b:dc:19:fc:08:0d:9e:e5:dc:0a:24:1a:
                    de:31:b3:c2:a0:ee:0a:f6:48:54:3f:ba:ba:7e:a9:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:4D:13:98:4C:26:86:FD:60:BB:13:CF:16:F2:3F:66:09:A4:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl

            X509v3 Authority Key Identifier:
                keyid:9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f894::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:2f:03:5d:94:88:0a:e2:39:5b:40:6e:32:ba:0f:a6:81:
         b4:2c:3c:e8:ef:0f:4e:2b:ed:53:07:eb:d2:64:76:87:fd:65:
         68:a0:34:21:45:53:26:a3:40:98:3c:a8:37:25:fb:66:5b:ef:
         4a:35:6a:51:e6:95:e8:cb:2c:fb:05:eb:10:92:b3:a2:e5:82:
         9a:84:fb:b3:55:54:cd:f8:7e:cb:fe:37:e3:8f:7b:33:4f:40:
         6d:c6:79:51:32:1d:15:7e:3d:a6:4e:ec:f3:95:13:cf:d1:c7:
         65:00:15:62:8b:bb:6f:ec:9e:60:4d:17:b5:02:e9:f4:98:1f:
         fb:18:31:5c:01:06:91:26:48:3f:fc:d1:f7:6b:4b:66:e9:ff:
         1a:4c:19:c7:10:f6:ec:20:8f:70:6c:9b:b9:bb:c0:f4:71:34:
         f0:91:09:8e:cd:12:9e:85:f7:33:68:35:dd:b2:10:aa:35:af:
         3a:66:9f:a9:2e:42:3f:8e:0d:da:c5:21:1f:e3:e8:5d:ba:ac:
         87:3e:6e:fc:88:7b:e1:e0:c0:fc:f6:30:15:9e:b0:19:20:62:
         bd:63:39:a7:dc:4b:4b:ef:58:3c:06:1a:11:b5:96:7d:1f:13:
         cb:88:f1:f5:de:cb:ad:1f:86:a8:48:60:34:6b:2b:20:5f:89:
         a0:0e:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:30:45 2026 by rpki-client