Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/98847853-f8f1-3b80-a3e9-b1b122ce4826.roa
File:                     98847853-f8f1-3b80-a3e9-b1b122ce4826.roa (raw, json)
Hash identifier:          oXp3/Yo1Etdellt0mvfFkvHCyk/XOOk6oMMVrY6SJ88=
Subject key identifier:   89:65:81:47:11:16:2D:EC:C8:F6:A8:EF:1F:1E:96:67:63:F7:BA:07
Certificate issuer:       /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26
Certificate serial:       010D0C9F4328584B5E930D46C33968118E3F0A28
Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/98847853-f8f1-3b80-a3e9-b1b122ce4826.roa
Signing time:             Tue 30 Sep 2025 19:29:59 +0000
ROA not before:           Tue 30 Sep 2025 19:29:59 +0000
ROA not after:            Mon 29 Dec 2025 20:29:59 +0000
asID:                     399134
IP address blocks:        2602:2cf::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:93:0d:46:c3:39:68:11:8e:3f:0a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26
        Validity
            Not Before: Sep 30 19:29:59 2025 GMT
            Not After : Dec 29 20:29:59 2025 GMT
        Subject: CN=7daac650-a6d6-4f56-afe6-9f25e1aefa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:90:09:1d:c6:80:87:7d:f0:22:14:5e:5f:
                    d7:4a:99:7a:28:2c:18:c4:ea:3f:bd:6a:e2:d7:1b:
                    8c:38:0b:28:87:90:e7:72:41:9f:84:64:c0:e7:ed:
                    6f:3c:ef:7d:6c:6b:bd:e8:af:ec:5c:8b:03:c5:77:
                    c0:1a:36:9a:0c:92:bb:8a:72:cf:35:22:93:4f:02:
                    af:28:73:06:5a:f6:3e:e7:04:d6:98:d3:f2:c7:19:
                    8d:ba:1c:c6:8b:05:04:c3:71:ce:92:71:b6:9b:c9:
                    4b:ab:ae:95:a3:81:49:30:c8:62:bf:e1:0c:04:b0:
                    e6:25:38:c8:96:7b:c6:ef:e7:10:3f:0c:aa:d0:dc:
                    ee:0d:3b:78:c2:98:33:5e:9c:ae:ea:0c:88:17:ea:
                    92:7a:fd:59:94:bd:1d:c1:51:d9:6e:a6:18:e6:e6:
                    14:82:ad:8a:89:e7:e7:df:39:3a:fb:90:a6:02:05:
                    68:42:c0:9c:ef:ea:5f:f0:a0:e9:3b:bf:f1:a5:45:
                    0d:6b:fa:22:80:2c:98:c8:08:12:eb:47:a8:7f:b8:
                    c3:a0:2f:32:b1:ee:b4:d4:a0:85:25:d7:ba:a9:3b:
                    4b:fa:a7:05:aa:65:05:ff:f5:5d:17:90:9b:7d:e3:
                    c0:0e:da:46:3e:5c:40:c0:76:1c:57:12:33:ea:20:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:81:47:11:16:2D:EC:C8:F6:A8:EF:1F:1E:96:67:63:F7:BA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/98847853-f8f1-3b80-a3e9-b1b122ce4826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl

            X509v3 Authority Key Identifier:
                keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2cf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:7e:e5:90:f7:a2:0c:82:6e:90:c9:bc:71:9a:0a:0c:eb:
         fc:d0:77:fa:28:62:86:85:d3:58:04:aa:6a:e4:b4:5b:35:69:
         b1:1b:86:c2:dc:96:39:af:bc:e0:aa:3e:17:8a:33:1d:82:4a:
         c1:a8:87:e7:d6:a1:58:32:58:c5:ef:52:1c:fb:33:e3:6a:00:
         55:47:ab:aa:f6:e0:62:f3:70:7e:cc:ae:d5:cf:5d:74:86:5c:
         0e:a3:91:fd:54:d9:4c:72:55:fc:a0:2c:e1:27:ff:68:98:58:
         35:01:19:80:e6:e4:bb:69:8a:c2:28:e1:aa:21:e7:8f:05:5d:
         d5:4d:b7:59:c7:cf:88:a2:ee:b8:4f:6a:09:95:e6:85:62:b2:
         22:15:01:ce:21:f6:d0:c1:3f:80:fb:84:4a:dc:ce:dc:7d:a9:
         32:fb:06:30:78:4e:37:7a:14:67:af:f4:1b:78:0c:5d:df:1b:
         cf:18:06:27:b6:83:63:6c:a9:ac:8e:51:f9:cf:32:1b:4f:54:
         ee:16:bc:05:2c:c3:69:e8:6e:ca:ed:ce:dc:20:41:3e:fc:25:
         24:58:b5:e0:2c:5a:a3:32:a5:bb:a5:08:1c:cf:fe:5c:f6:0f:
         a7:e1:71:6b:b8:7e:48:90:d5:6d:2d:d5:04:a1:2f:9f:76:d7:
         35:2c:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:37:30 2025 by rpki-client