Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/81c9bea4-0efa-3a35-b39e-7dec5959674c.roa
File:                     81c9bea4-0efa-3a35-b39e-7dec5959674c.roa (raw, json)
Hash identifier:          qWPxJIbDVl0gH38oun52muZ5AWObomIHaTohaWJGYzs=
Subject key identifier:   EB:90:BA:C0:7E:3C:3D:B8:15:5F:5A:27:F4:85:8C:74:EB:FB:CD:76
Certificate issuer:       /CN=c9b1d66b-bc2e-4d9e-b81f-15e85775404f
Certificate serial:       010D0C9F4328584A4AD59482CD2EEFF2C0D3A480
Authority key identifier: 2D:E5:0B:30:46:40:7F:C9:46:CD:38:2A:90:59:1B:B1:4F:39:71:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/81c9bea4-0efa-3a35-b39e-7dec5959674c.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     400699
IP address blocks:        2602:f852::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:94:82:cd:2e:ef:f2:c0:d3:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b1d66b-bc2e-4d9e-b81f-15e85775404f
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=128da56a-469e-4161-a0b7-d2391a08bdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:54:ab:c1:bc:5f:ff:13:50:5b:30:df:09:
                    98:60:0e:10:ea:e0:79:4c:62:32:74:4a:6f:65:14:
                    fc:92:20:50:54:2a:9b:a6:c0:8d:3a:f8:c3:01:bb:
                    d1:f6:32:2b:d6:27:db:c8:71:f6:38:2c:8d:72:d6:
                    a0:28:e4:d6:b6:f7:66:c2:bd:4e:1f:f3:39:eb:d0:
                    45:04:51:07:74:df:a2:9d:ae:91:c7:0a:bc:3f:44:
                    ef:7f:4e:ca:6f:89:be:48:60:e8:a3:6a:81:bf:ee:
                    71:f0:f2:97:1a:7f:65:b4:b2:65:9c:b6:f5:3d:fa:
                    64:07:a2:f5:cb:b7:00:9c:9b:fa:a7:31:40:cd:b3:
                    b3:76:5d:ea:c5:5a:f8:ae:ad:88:77:16:2b:31:77:
                    c7:33:e6:b0:a0:b4:64:04:c3:45:5f:0b:93:3a:c8:
                    57:90:8d:e7:0e:06:67:28:de:0b:47:02:45:8f:e2:
                    d2:93:c3:0a:ba:b9:39:00:67:62:89:a5:9d:cf:52:
                    e4:ff:01:ae:a3:04:ec:6f:a4:f0:71:10:76:e7:47:
                    39:7c:80:d5:65:d7:d8:6c:5a:1e:eb:6c:5d:7c:1d:
                    3d:3c:a1:e6:3d:59:37:f3:b9:2c:0d:16:77:4c:99:
                    e5:01:13:16:e3:92:d4:23:86:12:eb:48:78:50:66:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:90:BA:C0:7E:3C:3D:B8:15:5F:5A:27:F4:85:8C:74:EB:FB:CD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/81c9bea4-0efa-3a35-b39e-7dec5959674c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.crl

            X509v3 Authority Key Identifier:
                keyid:2D:E5:0B:30:46:40:7F:C9:46:CD:38:2A:90:59:1B:B1:4F:39:71:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9b1d66b-bc2e-4d9e-b81f-15e85775404f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f852::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:38:c8:39:37:31:48:a9:41:5a:96:cc:7e:56:7d:d5:23:
         bd:be:4c:79:b1:83:6f:8d:08:17:a7:57:25:e8:2e:d9:e3:50:
         47:2a:61:0e:8d:98:96:46:51:54:8a:ba:4c:a4:cd:4d:26:66:
         a7:99:58:e7:e8:17:1f:f1:41:1c:c7:06:88:66:d9:76:b8:d6:
         6b:ac:84:ea:4f:73:fc:83:66:96:60:ac:57:24:b0:7a:1d:08:
         3c:b8:f1:34:69:4a:2a:e8:4d:7a:6b:bc:23:bf:fa:82:87:01:
         44:3f:be:56:b5:85:12:de:9b:1c:c8:f7:42:3f:d6:ca:97:13:
         14:f7:53:41:32:9a:f9:ec:fb:e8:67:54:c8:da:6d:8c:17:dd:
         ad:27:f3:b5:02:0c:d7:41:71:38:1a:9d:17:a7:be:94:2a:1b:
         d0:90:cf:0b:9b:19:4e:5a:3c:20:72:0c:49:f6:fb:08:c0:84:
         82:41:4e:d2:9a:9b:34:d9:1d:d6:8a:f8:9c:67:76:d0:91:b8:
         36:e7:84:81:b2:6e:c7:07:5b:ae:79:01:38:30:8f:58:96:40:
         41:bf:06:d3:ab:c4:b1:6d:26:00:9b:41:2b:6d:24:c1:b4:e7:
         93:ff:0e:c0:5c:13:38:d0:8f:95:8f:fb:c9:f4:58:95:3b:a3:
         3f:a6:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:31:01 2025 by rpki-client