Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
File:                     08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa (raw, json)
Hash identifier:          9TTS3us3ZUxWqBEFPa/DFC0HtGICAW4r2EETarb3GG8=
Subject key identifier:   8B:D2:6F:98:0C:CC:24:D3:B9:DB:BA:26:A3:D4:05:B7:C4:B6:A4:87
Certificate issuer:       /CN=38f0cd1a-37b5-4e21-a451-606bf424f495
Certificate serial:       010D0C9F4328584B87B21ED6CB7445AD1F1ED020
Authority key identifier: 9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     26737
IP address blocks:        2602:f894::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1e:d6:cb:74:45:ad:1f:1e:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f0cd1a-37b5-4e21-a451-606bf424f495
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=3bca95f2-995c-47a6-8d85-eaf1775a0fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:6b:24:57:9a:29:d1:e4:e6:5a:44:97:5c:
                    49:3f:2e:d3:ce:3d:35:f3:01:b5:95:5d:d1:93:68:
                    a8:65:42:5c:24:a4:10:98:18:2b:c6:43:7d:2f:53:
                    57:f2:a2:2a:5c:6a:bb:c3:29:70:61:aa:b3:91:c2:
                    00:0c:17:f7:4b:45:a6:f1:ab:36:d8:fe:b7:f1:bb:
                    30:2f:1a:6a:fd:f6:1f:aa:2b:40:09:e0:c3:c4:87:
                    13:c1:be:f3:d3:52:fb:c5:13:46:40:fd:7c:e0:83:
                    0f:e4:fd:05:72:be:38:ba:de:1a:2e:a7:79:ca:64:
                    03:e0:80:42:3f:ea:e3:7a:8c:1a:8b:d3:79:ca:66:
                    dd:28:31:e5:48:12:43:31:1f:e2:49:1b:43:18:b6:
                    a7:e9:80:04:19:8b:44:f4:e4:ac:27:1a:b0:18:40:
                    a9:7a:0d:86:21:03:6a:f7:25:18:cf:c8:8a:52:f1:
                    29:6d:9c:c7:34:69:11:93:f1:60:28:a5:b0:4c:f8:
                    48:59:2c:b5:e7:17:72:aa:0c:6c:4a:3e:5e:6c:57:
                    52:ec:5b:66:97:17:5d:3f:2f:4d:90:d6:40:cd:b1:
                    79:96:27:bc:a3:6b:8b:3f:b7:91:dd:a3:ac:01:8a:
                    3e:64:1c:74:40:67:0f:1b:80:4d:ef:a2:9e:92:0a:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D2:6F:98:0C:CC:24:D3:B9:DB:BA:26:A3:D4:05:B7:C4:B6:A4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl

            X509v3 Authority Key Identifier:
                keyid:9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f894::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:1b:cc:bc:ab:a1:12:9f:a9:0e:85:ff:20:bd:73:d5:eb:
         96:fc:66:2b:c2:51:50:31:1b:93:3b:81:8d:95:95:87:7b:b2:
         89:a5:39:27:11:4b:50:9a:5e:83:18:c4:5a:12:d2:dc:0f:0b:
         bd:17:21:af:34:45:e9:78:72:f9:94:83:08:f9:6f:5d:86:3c:
         70:10:6e:9f:4b:ab:aa:26:93:bf:71:b4:e0:ee:cf:b6:e2:b3:
         a6:38:83:9d:4a:4c:bd:f3:3c:59:a5:77:55:c7:ab:f8:89:83:
         00:34:52:c8:a7:18:9b:f4:fd:7a:8d:8e:2a:d8:e0:a9:50:d9:
         26:1a:cd:cc:13:f6:ec:0a:5e:ed:7a:f7:42:f5:95:50:c6:1f:
         de:34:1a:48:c6:14:0a:77:a0:b2:f8:f7:ac:41:4c:bd:e7:08:
         93:29:61:0e:67:f3:a0:c2:a2:c8:d7:1a:cb:06:92:fc:1d:cc:
         9b:29:c2:22:ce:94:70:23:e7:f7:e3:e1:60:9c:70:46:71:23:
         2e:aa:d6:11:b0:99:da:a2:ac:20:b2:e9:48:11:f3:02:80:9e:
         cf:1b:56:0a:5d:3a:1d:a7:98:32:79:7d:b0:15:3e:04:fa:a8:
         54:a5:b2:ab:fe:62:83:49:13:7f:2d:97:2e:45:c8:a8:0f:13:
         5e:96:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:25 2025 by rpki-client