Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
File:                     5587e601-3810-3cad-ad39-d5b549845ba7.roa (raw, json)
Hash identifier:          BKGDpJlyHk5CSWaoMd5fJ7B/KP9vztQXTkfEFXn+J0k=
Subject key identifier:   53:20:D8:AA:62:4E:A4:04:FF:21:B6:19:96:CD:52:3B:A8:4F:B8:59
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584BBCDAE018F6D3D524BE7C6100
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     4186
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:e0:18:f6:d3:d5:24:be:7c:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=7393c9fe-9b3f-490b-900a-79ed3340a5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:4d:a6:b5:6c:46:bc:d7:8c:6f:e4:fa:1f:
                    eb:ea:1e:0a:2b:88:97:c3:5a:e0:6f:d7:e4:bf:97:
                    be:da:57:91:94:cf:39:a3:34:b7:96:80:f1:70:ad:
                    5a:cc:39:92:74:c5:25:17:d2:7c:86:09:3d:d7:da:
                    23:a3:64:cb:38:1b:6d:75:ca:33:1f:7d:7c:f2:37:
                    ac:f4:2d:7a:e2:b7:ee:c4:ad:6c:68:d5:fb:e7:f1:
                    4d:50:e0:00:b1:30:f1:60:e3:4e:11:08:d8:e1:c8:
                    58:0f:f3:ed:43:1a:9f:52:ca:7b:88:ca:6c:e3:30:
                    45:74:84:db:68:92:8f:58:93:d1:c2:63:7a:f8:fd:
                    33:e4:7a:12:d7:64:1e:7f:e0:62:49:11:2d:5c:49:
                    6d:d8:f1:5f:90:93:5c:f4:ac:2b:72:69:12:1c:b1:
                    ce:e5:7e:a1:bd:00:e1:ca:ed:9e:10:49:52:0d:77:
                    b0:24:68:6a:1c:0e:d8:45:0d:43:31:05:2a:a7:ca:
                    dd:be:b4:ea:36:d1:48:c0:21:8d:17:a0:9f:e0:a8:
                    f5:d6:07:aa:49:c1:66:7e:1a:3e:58:1d:d7:bc:65:
                    9f:f7:f4:20:65:92:8c:45:e5:40:2e:6a:b0:f7:3e:
                    c3:fd:d5:66:d3:68:dd:05:52:a2:98:58:e3:1c:4e:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:D8:AA:62:4E:A4:04:FF:21:B6:19:96:CD:52:3B:A8:4F:B8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:42:e2:3b:c1:5e:08:de:2c:08:32:0b:28:33:e2:cd:0a:bf:
         bb:ca:eb:94:17:f6:96:7f:f1:5d:24:2a:6d:65:a0:c9:6d:a0:
         a3:07:37:d2:ad:ae:17:2e:33:b6:13:3f:61:16:2d:d8:51:a7:
         7f:04:2c:ac:7f:53:21:f1:d9:42:f1:bd:63:52:e7:d4:92:61:
         84:fa:26:40:05:ed:20:30:b3:12:d7:2c:f2:7f:d9:8b:a5:8d:
         a2:8c:cc:06:69:b3:de:83:de:c4:8d:e6:17:a3:a9:da:5f:14:
         94:ec:63:80:44:77:ee:97:bd:0d:19:16:85:f6:95:45:31:78:
         1b:35:a1:00:fb:53:97:99:ed:4b:6f:c9:85:7b:ed:6e:26:fb:
         8f:c0:8b:bd:ac:e2:69:8f:f2:47:b8:83:3a:79:37:91:5e:2a:
         a1:43:dd:f6:20:19:5d:01:ef:77:66:a9:fb:a7:d4:b2:89:7d:
         48:3d:1e:64:62:b1:89:2e:10:d3:38:0e:31:4f:b0:f6:8e:55:
         1b:f6:3a:fd:72:78:09:48:b3:fc:82:ca:eb:1a:af:44:e8:9d:
         b2:25:fb:3e:67:92:f2:96:12:7f:ea:dd:bd:b0:e2:5c:05:16:
         00:59:9c:fc:27:73:dc:37:cd:ca:dd:6c:a0:ad:b8:25:06:00:
         35:51:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:55 2025 by rpki-client