Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa
File:                     dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa (raw, json)
Hash identifier:          hOKqf5KWG6Oz1MSi2CjfNf3XlQ8Y2CCDofz6UkxC/S0=
Subject key identifier:   C5:4F:E4:E6:28:4C:B2:D7:94:41:2A:A6:B7:E9:F9:57:1C:5F:6E:63
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584B4E770768A6EFFA5333886D00
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     26930
IP address blocks:        2602:ffc5:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:07:68:a6:ef:fa:53:33:88:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=dbee8abd-5250-4748-a1de-d20e4da74857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:eb:6d:8b:be:20:d1:e6:3a:36:8f:f9:eb:
                    d5:ab:e3:2c:8f:1e:f6:91:cb:1b:a4:35:33:71:cc:
                    30:9f:75:6b:b1:1f:93:a7:86:1e:89:5a:8e:9a:fe:
                    cc:8c:02:82:fd:f6:bf:6c:0b:9a:18:1b:a9:07:26:
                    d0:d6:16:34:9c:53:eb:83:a8:ef:fb:57:02:fb:fc:
                    5d:d8:3e:cb:43:4f:27:1c:29:c6:0d:8c:0a:12:bd:
                    ed:eb:97:d2:f7:02:22:ac:f0:5b:1c:25:fc:27:d6:
                    e1:7a:2c:85:91:84:48:31:ba:a4:60:7f:8b:99:95:
                    3a:71:99:d7:9c:ed:4b:24:a2:3d:11:6e:8d:c2:9f:
                    be:fb:78:d0:9d:ad:d2:b9:5b:e8:e4:ee:f9:02:2e:
                    82:5a:e6:65:7c:d5:45:d5:ef:ea:c9:2c:f8:b5:e7:
                    36:28:66:10:1e:c5:6d:f7:3c:29:6e:ba:c1:60:c7:
                    6f:e1:e1:5b:0e:2e:a4:d4:68:46:85:a0:86:06:95:
                    31:0a:5d:8e:49:61:62:c7:6b:c1:7d:ae:93:9f:79:
                    a2:3c:f5:9f:b6:6f:a1:65:e8:8e:41:3e:fb:cd:0d:
                    6b:dc:a1:ae:14:bb:ec:3c:64:0f:7b:29:35:41:4e:
                    0c:32:e8:08:c0:c4:cf:aa:fe:94:3e:0e:42:04:e2:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4F:E4:E6:28:4C:B2:D7:94:41:2A:A6:B7:E9:F9:57:1C:5F:6E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dcc38a16-4d6d-3597-a76b-e7e72c4af5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffc5:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:02:7c:6f:18:25:60:12:f4:d2:e8:c8:5b:a0:ee:6c:d3:
         5e:29:aa:cd:4c:09:ab:0e:ce:3e:c8:15:90:e7:a9:2d:35:d9:
         a5:c9:7e:9f:89:3c:ca:eb:be:f8:eb:f8:a8:92:6f:ad:c8:c3:
         db:95:27:61:7b:44:03:35:3a:50:69:77:92:63:15:d2:11:60:
         7e:33:84:b9:97:22:30:e0:bf:8f:d5:10:d7:e4:89:e5:9c:28:
         36:be:34:0d:e9:8d:d5:bc:41:3a:4d:53:b0:0f:fd:84:7d:aa:
         4b:1f:b0:eb:0d:d3:83:de:45:59:03:ba:87:21:05:f6:38:e2:
         ca:2e:c0:0c:6c:59:a4:9f:fc:34:7e:23:4e:1d:eb:4d:b8:8f:
         91:d5:46:e3:4f:23:a4:46:48:d0:6e:7a:d2:43:58:63:5d:d2:
         28:31:e0:e7:ef:11:a9:41:64:0f:92:e2:b5:df:f4:83:f5:e6:
         89:4c:18:ad:77:30:d8:b7:50:05:e5:4e:35:97:5e:1c:b3:f3:
         02:50:b9:48:c5:4c:41:b7:66:73:3c:db:62:b8:df:55:ee:24:
         60:9a:db:d9:36:b5:67:ca:3d:b0:bb:55:72:8a:74:8e:2d:db:
         2b:34:a6:a4:d4:f0:e1:8e:f7:f1:c3:4f:e5:2f:de:e3:31:42:
         13:e2:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:09:39 2025 by rpki-client