Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa
File:                     9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (raw, json)
Hash identifier:          m8Ggtt47cODKi3vRAbU7uhIhuHx1xZNsPXSpgtijU7I=
Subject key identifier:   B4:19:33:E0:80:CF:EF:54:C0:CD:5F:78:A4:07:B1:1B:32:5C:62:9B
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F4328584A73509AEF0DD517E303F3C7C0
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     400442
IP address blocks:        2602:fbc7::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9a:ef:0d:d5:17:e3:03:f3:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=c029c829-a18d-4e50-996f-5606766dd0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:55:45:88:64:e8:0a:ea:55:d8:a1:59:2a:
                    40:45:b9:19:14:13:d8:4a:d3:0c:bc:f7:3a:44:fe:
                    d4:36:59:17:56:63:07:f4:fd:d4:2c:49:64:f3:78:
                    06:94:b1:94:f2:41:00:0a:1e:17:91:c9:94:e0:08:
                    75:0d:a9:58:7d:e3:86:37:b6:5b:8b:ca:98:36:3a:
                    60:bc:82:48:73:47:43:56:b0:0f:fd:f9:c0:70:96:
                    99:cf:b2:18:64:08:89:3e:a8:31:1b:51:b0:a0:4b:
                    49:5b:be:4a:ae:4e:00:0c:44:e7:84:71:cb:ae:2c:
                    19:76:0e:d1:37:7b:b8:e1:40:9b:4f:5a:81:71:58:
                    16:9f:2f:96:63:11:32:40:ec:31:96:e7:f6:70:be:
                    96:8c:91:ad:0d:1d:e4:e3:7f:db:fd:28:a9:72:b3:
                    68:cf:62:60:21:97:da:fa:8d:37:43:a6:e2:c5:ab:
                    4f:38:10:a2:58:77:ed:ec:e4:9a:52:ee:a8:88:00:
                    e1:39:69:74:a9:e1:85:5e:18:40:93:ad:33:4e:aa:
                    86:60:47:21:8f:a9:46:6e:9a:78:b8:79:62:6f:fb:
                    d5:f2:c8:af:30:76:c7:73:75:c9:fc:38:b0:4c:bf:
                    74:8c:97:de:78:33:72:a4:77:54:a0:ac:91:9f:40:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:19:33:E0:80:CF:EF:54:C0:CD:5F:78:A4:07:B1:1B:32:5C:62:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:23:68:17:e0:08:85:69:c5:78:fd:6e:72:fa:a2:86:46:
         63:94:00:18:40:79:33:e7:bd:41:f5:7c:b8:ea:fb:72:e1:dc:
         d8:70:7b:94:65:03:aa:ba:94:2c:36:da:36:b3:25:b8:0b:72:
         70:93:68:15:42:ef:04:0b:9e:0a:aa:b9:33:1e:99:84:46:16:
         5e:3b:da:7f:9b:35:14:9b:e6:d4:9c:7a:3d:21:ce:be:f0:98:
         6c:fd:20:89:58:48:da:8f:3f:8c:21:ed:dc:03:9a:b9:87:bd:
         e8:7c:c2:4b:f9:83:8c:84:b2:6e:8d:97:0b:e4:3b:43:dc:a3:
         18:5d:2b:3d:a8:bf:9f:4f:d2:cf:98:05:81:81:93:6c:74:a2:
         aa:26:d4:48:f9:55:a7:ee:9f:bf:0e:e9:dd:f6:f4:85:45:ae:
         68:5d:a0:2e:76:f9:d5:f0:61:16:6f:55:6b:e9:03:33:0d:4b:
         1a:72:36:63:bc:a3:2b:1e:95:ba:7f:79:5c:25:7b:06:33:bb:
         eb:bf:48:63:d0:d3:fd:1e:c4:e2:b9:d7:9f:03:99:8d:02:cb:
         9d:ff:d3:c9:2a:1b:0f:62:36:7e:16:66:a6:d7:13:10:e6:ea:
         b0:1f:54:c0:3c:23:4e:a0:cd:5b:3b:d1:d2:32:17:f7:b7:87:
         92:df:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:43:25 2025 by rpki-client