Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa
File:                     37baabc5-3bde-35a5-ab43-e99b4632f040.roa (raw, json)
Hash identifier:          j7hZ1k9csde7QEThdqDEJ4HfTLFyngNucX5B0LIYrn8=
Subject key identifier:   61:0D:28:B1:ED:7C:EE:67:23:23:43:0E:6D:43:B1:B5:D2:C4:ED:AE
Certificate issuer:       /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Certificate serial:       010D0C9F4328584AEB5BD337F70DAEBDFA1C4980
Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa
Signing time:             Wed 20 Aug 2025 13:00:41 +0000
ROA not before:           Wed 20 Aug 2025 13:00:41 +0000
ROA not after:            Tue 18 Nov 2025 14:00:41 +0000
asID:                     401647
IP address blocks:        2602:f66a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:5b:d3:37:f7:0d:ae:bd:fa:1c:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
        Validity
            Not Before: Aug 20 13:00:41 2025 GMT
            Not After : Nov 18 14:00:41 2025 GMT
        Subject: CN=bc1d220c-cdb9-46b6-b933-d7b894a36228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:96:36:59:27:49:82:1b:17:ba:eb:43:42:
                    56:99:c4:f8:38:18:61:e4:a1:9c:82:c2:4f:d8:a5:
                    cc:fd:c8:89:6c:0b:a9:09:18:17:34:7b:4a:7e:ba:
                    8e:69:3f:16:34:35:b0:0b:0b:2c:eb:7f:50:be:9f:
                    6e:30:80:1f:1a:32:1d:31:16:dd:7b:05:02:47:11:
                    eb:83:fb:fd:37:1a:c3:6c:f7:b3:7f:b2:21:37:06:
                    6e:f4:2e:2b:47:b6:da:06:c7:72:c0:f3:fc:42:a6:
                    85:39:a0:71:6d:1c:92:6a:2c:7d:09:2c:c8:15:2f:
                    24:5d:f3:53:c5:15:50:c1:e9:ae:c5:7f:e6:79:24:
                    71:e2:18:53:e1:96:17:46:d0:8c:5d:fd:ea:6b:66:
                    b5:a4:17:5c:ae:48:65:6d:a2:ae:a1:ae:87:2a:d6:
                    03:8b:d2:1c:60:c9:0c:0b:40:26:11:73:2d:06:19:
                    05:e6:80:78:41:49:52:0a:71:9b:5c:b7:97:ed:4b:
                    43:e8:8f:19:4e:3d:bc:dc:30:48:96:43:66:f9:2e:
                    5b:54:75:f3:9f:25:dc:84:f2:f3:56:5a:03:6b:77:
                    c0:8d:c2:70:fc:45:7c:f3:ad:7c:85:59:40:f1:95:
                    a1:01:fe:69:59:b4:81:c7:35:e2:1c:74:f9:ea:fb:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0D:28:B1:ED:7C:EE:67:23:23:43:0E:6D:43:B1:B5:D2:C4:ED:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/37baabc5-3bde-35a5-ab43-e99b4632f040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl

            X509v3 Authority Key Identifier:
                keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:d8:e4:2d:06:d6:ac:aa:80:2f:91:d2:47:c8:a0:ca:ed:
         3b:d1:65:59:3c:f8:28:85:1e:a1:8e:3f:2a:0b:86:e4:18:c1:
         f6:31:ef:6e:31:61:a4:9e:98:07:91:39:59:64:bc:f2:c9:75:
         b1:d5:bf:e3:20:fa:6e:fd:24:f2:b9:ba:52:5e:30:45:67:18:
         c0:e1:bb:c2:3b:92:ab:f9:91:68:7f:c2:83:32:8b:33:e3:25:
         52:12:9b:61:d6:86:a9:94:0c:ba:11:91:67:0c:78:d7:7b:10:
         e4:bd:c0:84:a0:e3:9b:a4:90:3d:dc:67:69:4a:d2:c7:da:23:
         76:22:75:dd:01:54:34:56:35:18:c1:fb:c8:42:1e:5b:b8:09:
         39:57:10:44:bd:bf:29:75:2e:9d:ae:42:54:24:42:e5:2e:f6:
         0a:56:b9:15:df:6a:0e:33:6e:fb:55:1e:2a:84:2a:e3:9f:d8:
         45:9f:d6:f3:27:29:fc:d6:bd:3f:7f:31:50:b2:4d:9b:66:e8:
         34:69:8c:9c:81:e4:db:02:d5:ac:2f:2f:73:39:d1:cb:e7:72:
         d5:7f:a8:99:41:22:c3:0f:07:8d:10:99:b8:c7:54:71:0a:6f:
         3e:f0:27:30:89:40:08:93:03:e4:fd:70:1c:ce:b1:75:36:0b:
         60:af:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:32:53 2025 by rpki-client