Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/968ec0a3-80f8-35ec-9449-fdee507f02ac.roa
File:                     968ec0a3-80f8-35ec-9449-fdee507f02ac.roa (raw, json)
Hash identifier:          2AWj1sr5BWhU2EBYrgpvNdyraQSGASS4OJABvOxWIwk=
Subject key identifier:   B2:C0:10:31:BC:35:2F:2F:7D:F4:32:22:FD:06:C3:83:42:CE:7F:CD
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BCF030E900FD41830E280
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/968ec0a3-80f8-35ec-9449-fdee507f02ac.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cf:03:0e:90:0f:d4:18:30:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=577dd22d-9a60-4df7-98ce-a719d76e8429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:ad:90:3b:ee:cd:0c:17:46:37:8c:31:07:
                    39:fa:6f:da:94:d3:e1:6b:8f:28:d7:80:b2:bc:26:
                    d9:fe:a8:80:98:03:3c:1f:a1:a4:95:2b:d8:f8:db:
                    91:32:9f:69:cd:cf:2a:a9:e7:8d:5a:51:05:95:aa:
                    db:0a:25:b7:3e:c9:e0:7c:69:87:b8:d2:91:a6:3e:
                    6b:77:35:84:62:0c:45:79:b2:1a:ea:f4:07:45:c5:
                    92:0d:5d:3e:0f:9a:10:4d:a6:14:f7:a4:35:cc:36:
                    37:26:23:9a:ac:c8:37:da:bc:c5:37:37:6a:bd:39:
                    80:a2:57:6e:98:8f:42:39:57:5b:e1:d4:6c:fc:ad:
                    c1:c3:95:34:af:7a:2b:18:a9:3a:59:d4:94:7b:d8:
                    ac:87:50:ce:5e:b9:aa:2c:dc:c8:3a:38:9e:a4:34:
                    7d:3b:de:65:40:64:33:03:87:d7:a7:05:1c:bb:d9:
                    3e:75:f2:60:18:90:9a:8e:e1:88:4c:57:37:bc:01:
                    19:f1:59:eb:09:d5:d8:f0:d3:7e:7a:c8:e6:8e:13:
                    98:2d:26:c2:5d:93:f7:52:8b:dd:13:7d:4a:50:50:
                    96:12:70:60:63:96:4d:7b:bf:bb:02:38:90:fc:47:
                    7f:ca:87:5b:98:7f:de:fe:67:22:27:04:cf:9a:eb:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:10:31:BC:35:2F:2F:7D:F4:32:22:FD:06:C3:83:42:CE:7F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/968ec0a3-80f8-35ec-9449-fdee507f02ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:dd:90:73:30:df:e1:17:47:65:61:35:44:ff:00:d5:72:
         29:ee:39:d8:00:f2:5f:bb:e1:1e:b6:c9:b9:02:2b:96:bf:af:
         fc:b1:5c:dc:c2:98:09:b4:ce:4f:ec:f3:e3:67:be:a7:23:6d:
         e8:8a:a7:0c:51:fa:05:f2:20:6d:92:84:02:38:a8:d2:a7:68:
         77:bb:6a:6b:a0:fc:d2:2a:e6:d2:54:29:f2:3f:ac:61:95:0f:
         7a:71:e0:f4:fe:a2:03:c8:47:7b:56:26:ff:16:74:7c:2c:4a:
         71:ed:e5:d5:e0:6a:68:3a:00:57:f0:2c:9f:eb:ad:45:36:97:
         b8:3c:18:3a:f0:73:06:8b:93:ac:db:a0:aa:4c:bf:6a:c1:f4:
         a6:4b:9e:1f:0d:67:71:f5:de:b7:5f:95:67:76:52:be:ad:a7:
         94:e6:0b:96:b6:bb:14:30:e6:34:45:ab:a0:73:eb:99:fb:c9:
         de:89:26:5d:6b:8f:f9:2b:a3:99:b2:82:a1:76:9f:fa:5b:60:
         6e:d8:f4:03:c8:aa:2c:30:af:40:09:62:45:b4:8d:a1:e2:55:
         50:ca:b7:1b:46:06:ce:25:bb:75:bb:b9:c7:99:25:c0:77:27:
         23:d2:c0:80:13:3e:ed:21:6b:1c:e0:fd:dd:8e:7b:6f:f0:3b:
         56:68:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:09:23 2025 by rpki-client