Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/2b70c783-e64a-3811-b5e2-b9b793a3cfe9.roa
File:                     2b70c783-e64a-3811-b5e2-b9b793a3cfe9.roa (raw, json)
Hash identifier:          r8hN6p9zOiGL0ZqSx09IwcOQD6XAjhBYCeSiYmmBNFA=
Subject key identifier:   A3:7A:BB:F5:86:51:6A:E7:94:FF:9F:2B:09:D2:E8:75:3C:96:19:DF
Certificate issuer:       /CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a
Certificate serial:       010D0C9F4328584B25FC37C96B4ACC58DAE54B00
Authority key identifier: 33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/2b70c783-e64a-3811-b5e2-b9b793a3cfe9.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     399756
IP address blocks:        2602:f9e1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:37:c9:6b:4a:cc:58:da:e5:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=7c825ad4-80ea-4b62-8e5b-70149a487d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:84:b6:3c:4f:d6:10:dc:d5:8b:49:d8:33:
                    47:36:73:d5:17:ed:85:2e:56:b1:f2:73:81:f7:4a:
                    29:53:ac:09:66:d2:a6:5d:f8:c0:af:cc:e1:d0:26:
                    99:1f:ea:cc:dd:c4:1e:70:ce:14:13:a7:e0:31:81:
                    b1:d8:30:16:64:c9:3b:bb:1e:9f:21:e6:d8:3d:c5:
                    d0:51:60:18:af:31:f2:10:1b:bc:5a:c6:62:f2:96:
                    8e:73:bb:f1:05:98:05:6f:93:45:f4:a3:ad:38:4f:
                    2d:9a:bc:ef:35:e1:f5:e3:8c:ad:7c:51:09:3b:c7:
                    f9:05:b6:cb:43:ab:16:52:a2:ac:bf:36:b7:31:d0:
                    43:e4:dc:fe:c8:df:81:b0:f2:ab:bf:e8:43:4e:7b:
                    a1:15:ab:1d:76:c6:da:0e:12:f4:fd:77:bc:d9:05:
                    53:8a:bd:de:cf:7f:9d:c4:ba:a6:2d:c3:b4:29:f4:
                    dc:52:25:2e:8e:b8:6e:76:49:3e:eb:90:35:4f:f3:
                    41:bc:53:e4:cb:46:39:9b:a9:70:3b:07:88:89:cd:
                    f3:8d:2b:8c:52:78:af:06:24:91:2a:9e:29:fd:85:
                    8e:b5:af:99:66:28:2b:2b:4c:21:9c:24:86:23:d5:
                    e1:62:13:fb:a6:19:c9:46:fa:69:a4:f2:7d:31:3b:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:BB:F5:86:51:6A:E7:94:FF:9F:2B:09:D2:E8:75:3C:96:19:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/2b70c783-e64a-3811-b5e2-b9b793a3cfe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl

            X509v3 Authority Key Identifier:
                keyid:33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:82:ac:a3:d0:78:a8:46:77:69:eb:58:20:33:c5:48:8f:
         02:17:9e:ac:3d:47:2a:98:f2:3e:a1:9c:4f:47:af:34:20:3c:
         e6:79:ea:45:e5:16:dc:75:77:3b:ec:a7:c2:87:65:0a:26:86:
         f8:b6:64:f2:80:b5:fb:68:5a:2f:0e:52:79:63:99:df:d5:9e:
         50:ed:86:ab:2e:12:04:a5:67:e8:bb:7f:8d:91:3b:30:01:42:
         09:5e:9d:09:41:99:e4:6a:e5:78:cc:00:44:03:0f:1f:92:c9:
         6c:0e:a2:5d:06:b3:d7:67:32:91:55:d9:3c:f0:33:7a:d7:d7:
         8a:4c:d5:95:62:73:2f:59:65:b8:4d:40:d6:5f:25:4f:e2:53:
         1d:91:44:2f:de:8c:aa:a7:b9:52:70:3e:e7:f4:26:a2:11:80:
         ac:15:e6:39:e1:6d:47:e4:a4:11:00:4c:e2:63:25:9d:9a:51:
         53:10:8d:47:b3:d9:09:36:ab:f1:32:37:6e:a5:04:c6:4c:77:
         fd:a3:60:43:42:75:fa:ff:f0:cc:1e:88:05:c2:a7:98:e8:bd:
         29:f1:e5:93:19:54:2a:6a:cc:fe:de:6e:a8:49:1e:91:3e:c8:
         ba:4c:95:55:93:96:e4:8f:16:02:a6:ba:7c:41:83:25:9a:9e:
         1d:81:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:42:12 2025 by rpki-client