Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/9777034a-95fb-3c21-9d80-7ac4dc52d42b.roa
File:                     9777034a-95fb-3c21-9d80-7ac4dc52d42b.roa (raw, json)
Hash identifier:          gC3U01yPyFl3t7S6OaX7qhjZenpyEAMoBxC8NoZvnYo=
Subject key identifier:   63:E7:76:98:3E:04:A5:6D:20:7F:E4:9B:F5:8E:5D:F6:3F:B1:C2:3B
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F4328584AC5AB8551052AEED6B8F776E0
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/9777034a-95fb-3c21-9d80-7ac4dc52d42b.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     26968
IP address blocks:        2602:ff93:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:85:51:05:2a:ee:d6:b8:f7:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=2523cfc4-c087-41f4-870c-f1310cb1bdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:92:20:88:4e:66:bd:d6:2b:c9:68:68:cb:
                    6b:ab:f5:00:50:28:42:cc:33:14:32:49:04:3d:b6:
                    c9:03:57:3e:2c:ec:03:11:2f:02:94:48:76:2d:09:
                    4b:7d:7e:04:7d:fc:a8:0a:79:78:bc:52:7c:51:07:
                    d3:7e:73:f6:6a:7f:00:6a:09:49:91:f7:98:81:bb:
                    56:d4:69:68:63:15:92:84:f7:8c:6b:f3:d8:87:b9:
                    95:73:49:59:c7:0d:2a:86:65:8b:03:53:86:bb:3a:
                    a4:1b:d9:df:6e:fd:5b:18:97:11:18:9c:5b:48:68:
                    d9:2a:81:82:a7:fa:5c:b7:31:4c:96:68:26:af:1d:
                    7e:62:ff:56:0b:47:9f:f5:75:f7:5a:5a:b3:e1:e7:
                    cc:c3:cc:bb:1f:b8:c9:97:80:b5:82:b1:83:a7:2f:
                    61:5e:a8:70:74:1d:bd:ba:35:65:23:8e:58:05:22:
                    12:34:54:53:50:a8:6d:8d:90:0a:1a:02:51:0c:a0:
                    9a:4c:4a:89:c2:db:e4:cc:59:67:cb:ce:c0:ce:bb:
                    fa:df:05:fc:3a:67:8a:ab:a8:a1:87:a3:20:94:ef:
                    04:a3:4a:1f:25:4b:ac:67:8f:ca:d2:5e:32:4c:0f:
                    a6:10:ec:3f:b7:27:8f:65:f9:57:31:8b:7c:00:20:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:76:98:3E:04:A5:6D:20:7F:E4:9B:F5:8E:5D:F6:3F:B1:C2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/9777034a-95fb-3c21-9d80-7ac4dc52d42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff93:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:09:15:3e:cd:dd:17:0c:b8:39:d5:b8:68:d9:de:6b:8d:
         45:d0:d4:29:9c:bf:65:21:85:ab:86:cb:34:61:24:f6:6a:9a:
         99:7f:28:3b:ab:12:45:ac:ef:c3:0a:aa:39:bc:16:b4:f2:38:
         34:fc:fd:0a:e1:f8:db:bf:77:8e:c0:01:86:b1:c2:85:c0:50:
         15:19:55:30:4a:9a:94:74:6d:b6:f8:1a:d7:5d:fe:d5:00:92:
         c7:90:d1:29:06:a5:b0:0a:e0:c4:8f:b1:13:73:ba:21:c0:8b:
         f2:7a:d2:f4:0d:5d:88:32:29:e8:ff:95:5f:c7:db:0e:21:23:
         94:b2:10:57:e0:1c:8e:b7:dc:b0:2e:c9:35:7e:3b:c5:10:8e:
         ed:c1:09:72:bb:a9:ef:20:f4:b8:dd:42:58:77:41:73:48:d0:
         52:be:e4:ec:18:3f:09:31:75:a8:a2:ee:54:bc:2f:c1:b2:a9:
         2b:8f:dd:3b:3f:1b:07:93:6b:28:4c:4a:39:5f:c5:16:22:14:
         d2:ae:e8:c2:75:68:d2:f0:18:a6:86:aa:cb:6b:ec:b2:f6:94:
         5c:55:9e:26:36:b0:af:92:f8:30:91:8a:83:bd:10:e9:e6:d0:
         c1:02:22:f0:bc:f6:3d:bd:ca:66:dd:47:19:a7:ae:65:f0:93:
         7b:b2:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:25:10 2025 by rpki-client