Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
File:                     cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa (raw, json)
Hash identifier:          4FE2C3Tu2XBuR5jYX3MVbZ2WJN0Rz9GFjaac6vdE3Xs=
Subject key identifier:   ED:8E:36:C1:7A:45:5A:79:B6:BA:27:E4:D4:AC:0A:F9:D5:C6:09:9F
Certificate issuer:       /CN=8cce0cef-88a2-481a-91e3-c005827c7890
Certificate serial:       010D0C9F4328584A66C06E0D8C4A0D1927A54680
Authority key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     18935
IP address blocks:        2602:fa96::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6e:0d:8c:4a:0d:19:27:a5:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cce0cef-88a2-481a-91e3-c005827c7890
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9062a3ad-4b86-471b-8ab0-d359de1d1901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:b3:bd:39:b4:59:63:15:2f:47:19:62:bd:
                    8a:d9:a9:9f:e0:87:70:73:29:79:7a:df:66:1d:fc:
                    04:3d:0f:e3:6c:ab:af:51:28:86:bc:d0:97:af:7e:
                    aa:75:60:74:70:4b:33:b7:b3:9e:50:0d:f9:67:61:
                    90:ed:e9:96:6e:86:7d:03:2d:18:50:bc:52:32:1f:
                    ed:78:b6:5b:2c:83:50:c0:1b:44:af:cf:94:4e:a3:
                    49:8a:f7:48:ba:19:d9:16:6d:90:b3:84:3b:a3:61:
                    79:c2:a5:a3:a6:47:b0:19:da:fe:70:07:02:03:0e:
                    23:03:91:19:50:1d:ea:02:1c:7b:69:f8:ca:97:e8:
                    9e:0b:63:5e:0e:41:75:a3:19:d8:e6:9f:03:05:15:
                    72:1f:e2:9f:01:bd:dd:6d:e2:cb:c8:d0:3a:db:11:
                    0a:03:e4:35:39:b5:72:57:d1:93:6d:7c:87:7a:42:
                    bb:e1:0f:1b:93:34:6a:17:8e:0a:d3:35:68:ff:80:
                    ef:84:75:48:fa:3e:dd:92:c7:bd:d3:b9:c2:10:9d:
                    8d:64:ff:16:f2:87:aa:98:bc:41:43:e8:41:3b:aa:
                    04:95:a8:56:87:f5:cb:aa:27:b2:b8:1d:7f:a2:a4:
                    66:9c:48:1a:d5:19:dc:a4:bb:09:6d:54:b9:74:ce:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:36:C1:7A:45:5A:79:B6:BA:27:E4:D4:AC:0A:F9:D5:C6:09:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl

            X509v3 Authority Key Identifier:
                keyid:4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa96::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:d6:91:9c:1d:95:78:72:7d:ed:8e:20:b4:b9:38:f9:de:
         e7:54:f8:c7:ae:67:a1:c7:26:5d:c1:48:01:91:32:37:fd:ec:
         97:e0:ea:0a:53:09:cb:48:7c:71:54:37:df:50:f1:ca:2b:fc:
         f4:a5:b3:94:0d:ea:47:fd:53:1d:6a:07:54:4c:46:7b:dc:7f:
         3c:70:50:fa:e0:3a:ae:13:cf:95:4a:7d:3b:42:1b:de:46:7f:
         04:cc:5c:ca:51:4f:c3:73:2d:69:55:da:3a:53:83:e1:e9:55:
         7f:86:c1:df:17:b1:98:da:9e:00:29:51:db:66:f9:05:79:92:
         a5:2c:6a:dc:98:9d:0b:84:8b:0f:11:48:14:30:f7:c5:f0:3b:
         14:5c:c1:7f:b2:d8:47:e2:55:3a:ab:42:1d:52:4d:57:a8:38:
         44:98:45:e6:88:b9:8d:73:b7:f9:66:1a:56:a6:20:d1:1f:08:
         30:73:36:6d:8f:ee:c0:29:0b:1c:85:d2:40:de:31:be:42:04:
         4e:29:32:e6:ca:c5:13:5d:26:a6:bf:35:92:75:8f:f9:be:65:
         cb:96:f1:23:77:11:3e:0a:52:38:a7:e2:28:c7:b5:ff:55:07:
         3e:5d:3f:40:34:ec:a1:48:8c:a3:06:05:ad:e4:85:d3:72:75:
         22:c5:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:01 2025 by rpki-client