Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
File:                     eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa (raw, json)
Hash identifier:          C95zLI6Ox5lGL1UApWDqu7pAJs6YiEIP8aLM6I0xNz8=
Subject key identifier:   7C:27:AF:FA:FC:7A:90:D1:FF:8D:33:59:A9:58:DA:80:1D:7D:6C:CC
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584ACB40EAA29C95A1BEE5AE7100
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     399646
IP address blocks:        2602:f9f3::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ea:a2:9c:95:a1:be:e5:ae:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=39cb18c9-3bb7-4863-bf08-e4760f6c8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:7b:bb:bc:fb:e6:f4:9a:14:47:20:23:c3:
                    47:1a:1c:10:5b:85:a6:75:c7:2e:3d:7b:e3:fb:1a:
                    38:87:4a:f9:40:40:f7:8d:d2:2f:b9:50:99:80:5b:
                    d8:64:92:44:af:48:4b:9f:d4:de:da:83:3d:72:ff:
                    fa:86:62:b7:52:ea:95:91:1a:1c:f4:bc:78:1a:0a:
                    d0:88:9d:2e:cf:29:87:21:99:72:86:a0:bd:5f:79:
                    ef:27:50:da:fc:29:d3:8b:44:d0:b0:4c:5f:4c:82:
                    30:01:1a:e4:b6:5e:03:1a:ca:86:46:f2:dc:52:63:
                    69:5b:d0:3f:52:42:6d:f4:f6:0a:31:bf:7b:a9:ab:
                    b5:52:40:da:9d:8f:8a:26:0b:a9:5e:1c:bd:ce:e7:
                    07:1d:c8:43:23:6b:f2:85:9d:ea:16:6c:ed:e7:c6:
                    16:62:ca:1f:c2:fc:a8:9f:10:6f:04:66:b8:f0:d7:
                    eb:54:b6:ee:71:c3:17:02:c1:36:e2:c7:b0:57:ae:
                    d0:b4:5f:60:4c:18:2f:50:2f:41:18:0a:1c:da:68:
                    56:58:21:db:06:0c:bd:2e:3a:35:7d:14:98:22:aa:
                    8a:bc:a7:f1:fc:a6:a1:21:92:c2:3a:f5:74:3c:90:
                    fe:4f:b7:b9:7c:aa:d5:d2:f3:2a:3c:be:0e:2b:36:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:27:AF:FA:FC:7A:90:D1:FF:8D:33:59:A9:58:DA:80:1D:7D:6C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/eaabc137-0dda-3c05-b559-bd4b4dd04b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:64:f0:af:9e:cf:48:d3:5e:23:1f:29:1d:93:f5:ee:27:
         e8:48:42:83:cb:98:5f:be:74:a6:a1:62:5e:67:af:d6:56:05:
         6b:82:26:43:2c:91:4f:a1:dd:79:36:14:48:ad:a4:63:6d:0d:
         09:c7:67:5e:b4:0c:1b:8b:f5:10:6f:c8:e7:20:a9:bc:2c:09:
         13:cd:2f:a3:8f:8d:1c:40:78:f8:a2:6a:f3:61:80:e3:43:4f:
         f7:bb:ca:c4:1d:f5:5d:6e:da:14:1d:5f:84:81:bc:f9:6e:45:
         38:cc:c9:61:fc:60:79:97:de:7e:02:27:0d:c8:8e:02:b4:91:
         c9:97:8c:de:f4:fe:9e:b7:98:4e:0e:e2:e1:ed:62:bc:f7:00:
         73:78:0f:87:ce:77:a5:74:1f:d5:16:77:cc:35:43:3f:5a:79:
         65:7a:fa:db:ba:9d:77:9f:02:9d:f8:f5:8e:f9:b7:46:33:57:
         58:9f:a2:31:44:e3:d6:7a:2e:37:9a:03:9c:f1:31:86:73:fe:
         74:61:25:ae:8b:7e:85:bc:52:81:59:26:d5:63:48:2c:bf:3c:
         e5:9c:64:b7:f2:c2:fb:8c:1c:86:86:47:3b:dc:5b:05:1c:1d:
         0f:10:b0:21:47:c8:48:a9:8e:2e:d0:44:08:69:65:6b:83:c7:
         91:2f:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:00:37 2025 by rpki-client