Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa
File:                     09db9a4d-0e69-304d-b5da-1b70837caac5.roa (raw, json)
Hash identifier:          Ung0GrVanP9c15UahsEBIRD4fEFiurZH/795c//PAfk=
Subject key identifier:   F9:A8:8A:09:50:E0:9B:5D:09:17:E5:F3:40:30:CF:75:D9:90:12:48
Certificate issuer:       /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e
Certificate serial:       010D0C9F4328584A6AF0A45CEBECC4695CFF4B80
Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     397700
IP address blocks:        2602:f826::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:a4:5c:eb:ec:c4:69:5c:ff:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=21de39d5-b866-47f3-9892-3a89ef78bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:ec:c2:31:da:aa:74:7c:c9:3f:59:cf:e2:
                    f7:aa:e4:5a:5b:75:af:a8:a8:fe:46:da:cb:fa:95:
                    1c:93:5f:93:79:00:1b:20:68:f5:53:14:fa:e4:4a:
                    48:92:7b:70:95:07:05:e0:a0:bb:f6:4f:7b:02:27:
                    a7:36:f1:65:6b:3f:56:1b:71:b2:57:c0:0f:a4:83:
                    1d:db:e7:a2:1f:91:6b:38:fa:52:4c:db:fc:1a:a1:
                    a5:84:bb:94:24:69:e1:32:1e:3a:d0:ef:67:cd:7e:
                    39:1e:94:51:10:fa:b5:5a:7b:1b:95:d7:ad:00:b6:
                    94:b9:48:d0:83:89:d5:e3:10:b5:a0:fd:c8:6c:3f:
                    22:25:72:d7:17:66:d8:84:73:b1:fe:cc:16:bf:0c:
                    ee:42:63:be:a2:55:d1:a6:e3:45:ad:d1:1a:6e:3d:
                    aa:c0:f6:3e:ad:9a:4d:b1:08:eb:88:5c:5a:20:54:
                    5f:21:fe:74:dc:1f:8b:f6:6f:a8:c9:18:a6:85:54:
                    14:a8:29:db:70:19:68:e4:b4:e6:81:0a:2a:c6:24:
                    33:7f:a6:93:34:63:a4:81:c3:13:76:ab:5e:71:7a:
                    3c:65:a1:19:dc:53:c4:59:eb:c6:95:46:19:ef:f9:
                    3b:2a:7b:7a:23:22:00:4a:18:ef:3d:16:a8:1e:48:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A8:8A:09:50:E0:9B:5D:09:17:E5:F3:40:30:CF:75:D9:90:12:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl

            X509v3 Authority Key Identifier:
                keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f826::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:e8:71:af:4c:ac:7c:2b:e8:a7:6e:12:31:2a:c6:bb:47:
         1b:e9:16:23:49:f6:4c:c2:33:f9:a1:08:45:3d:3b:5a:44:8b:
         9b:83:a4:16:96:c6:ea:40:ed:35:16:c1:74:0d:01:7d:43:da:
         28:7c:a4:a9:b1:1c:4c:ec:b9:8b:8b:a6:4a:ae:d6:f8:59:1f:
         e9:99:43:01:6f:fe:1a:b8:09:66:ce:f3:2c:70:99:64:d0:f0:
         3e:d3:4a:40:66:19:18:0e:30:13:bc:37:c1:7e:3d:f2:d3:4c:
         58:7d:8b:3a:02:c9:fb:27:e7:3d:23:e9:47:bc:7d:50:b4:f8:
         44:3a:b4:f3:4f:bc:dd:c1:96:ec:30:cc:22:79:fa:13:c4:cd:
         01:ff:e2:ec:ad:1c:b7:34:11:12:c5:0d:f6:f7:85:f3:75:ac:
         8f:29:f9:97:9a:f1:fa:f5:82:6e:37:98:8f:5c:fe:77:ae:0f:
         d5:ab:dc:f0:f2:b5:f1:50:68:dd:25:89:56:fe:75:fe:df:5f:
         c4:60:9f:10:d5:2b:d2:43:93:b4:26:18:0d:a2:aa:c9:78:10:
         65:64:35:11:ca:3c:ec:a9:6e:c9:e6:66:33:09:bd:91:96:47:
         6b:7b:6f:e1:23:a3:1b:f6:db:ba:81:dc:b8:a2:7a:1d:6d:0b:
         7d:a5:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 08:52:43 2025 by rpki-client