Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
File:                     0e7b6b94-9855-32f8-8b01-5e42800b5852.roa (raw, json)
Hash identifier:          gHEDaI/4pssPsUAAqXld4X1eaP4W7zsVUfcs0sqV3XU=
Subject key identifier:   01:4C:59:44:B6:D5:9A:BD:47:90:7A:1C:EC:BA:15:76:9E:46:C8:06
Certificate issuer:       /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
Certificate serial:       010D0C9F4328584B1F0174149D61F9F69447F2C0
Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     398485
IP address blocks:        2602:fb2b::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:74:14:9d:61:f9:f6:94:47:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=d9cf48ff-9c08-40e5-8eab-62841dce5ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:83:05:f7:43:16:b2:ff:1a:bb:ff:ee:22:
                    8e:36:95:d2:9d:e7:3d:78:b2:7c:1c:4f:4b:20:83:
                    a4:51:fd:9c:41:9e:98:b5:b1:b1:30:e4:ef:2d:6f:
                    ae:5d:d9:45:65:e1:48:2d:16:79:0e:95:dd:92:d2:
                    bb:fa:ab:bd:84:d0:4b:20:5e:76:0a:30:e7:2d:e8:
                    c4:1c:04:42:4f:94:bc:d8:35:a3:71:1f:5c:a7:54:
                    a6:06:fb:e8:d1:13:d5:2f:43:48:57:92:91:fc:bf:
                    30:50:c2:49:29:0a:95:a2:dd:44:ca:21:7e:a6:c9:
                    25:24:93:6d:fc:5d:d3:66:29:d3:0b:20:a7:57:71:
                    44:be:df:6b:b2:e7:7c:15:b3:79:1e:d4:a3:db:d5:
                    30:1b:7c:bb:cd:35:90:f6:81:9a:4f:d2:f8:19:57:
                    ad:d0:76:ed:52:19:8b:25:5d:5e:56:e9:83:42:ee:
                    b5:8c:10:e3:d6:57:fa:5f:64:0e:30:3f:35:a2:67:
                    15:b7:2c:0a:c7:84:96:51:87:fd:09:1e:5d:9d:3b:
                    db:c2:6b:ff:fd:52:ef:05:af:33:6a:f6:21:cf:bd:
                    93:ab:2b:cc:e0:58:d8:b9:d6:dc:59:d8:62:70:5b:
                    be:00:dc:7b:d4:9d:2f:58:6f:0f:a7:44:63:b3:36:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:59:44:B6:D5:9A:BD:47:90:7A:1C:EC:BA:15:76:9E:46:C8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:47:db:eb:5f:a0:b3:bf:07:08:21:59:79:7a:39:39:8a:
         35:5e:8b:e7:3b:ab:ea:17:0e:38:92:7c:50:fd:ba:e4:ad:76:
         b8:d7:b7:25:fa:36:b4:13:ff:47:fc:42:ee:80:85:18:7c:53:
         91:30:8e:24:c8:54:d2:84:70:62:93:41:4c:39:2b:5a:d2:d5:
         b9:91:3e:b2:23:00:c8:51:dd:f6:da:1f:75:a2:d3:8b:ff:83:
         8f:1b:5b:0c:2a:53:ad:f5:42:ef:fb:c8:82:33:01:64:a9:e6:
         8f:30:49:41:b9:51:e0:e7:44:d3:b2:cf:ca:74:5b:49:67:67:
         10:22:e8:ad:20:f4:3f:ba:60:51:2b:99:94:d1:43:9d:57:01:
         4c:51:70:f0:0b:e9:15:b1:90:5f:f4:32:3a:76:63:b0:b5:1f:
         2b:5f:45:44:8a:cf:1f:19:2b:60:f2:cc:ee:0d:28:6a:97:89:
         a3:75:62:c3:00:32:2d:d7:9e:7c:1b:c9:51:93:4b:a0:be:87:
         b8:a4:65:b3:79:33:94:96:6d:30:06:19:b7:75:61:2e:e7:49:
         d6:f0:ff:69:b5:42:1b:5b:e5:ee:5c:a3:52:93:01:d0:fd:a5:
         25:1a:06:4c:97:8c:2b:30:4b:fc:c2:b2:15:05:9b:71:0d:c9:
         8d:f2:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:18:04 2025 by rpki-client