Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa
File:                     05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa (raw, json)
Hash identifier:          OeOVxb4pNuC+yZtrihU5SBhP8+sZdYw6S064nrkX7hE=
Subject key identifier:   BB:FE:E6:1F:E8:A1:1C:22:46:62:35:CE:C1:E7:C1:7C:1F:4F:87:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DBFC3774498B1B15CBB700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:7b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:fc:37:74:49:8b:1b:15:cb:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=06bf70bf-0f96-470c-840f-3e749902dbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:54:e0:4f:42:85:83:53:8b:37:c7:48:a2:
                    6e:46:bc:96:a1:23:12:3f:14:41:52:c7:d2:7b:35:
                    ea:6e:d4:bc:64:4d:29:e4:bd:81:73:8d:6f:23:64:
                    87:ba:50:f8:6c:aa:fb:3a:c1:fa:ad:ed:bb:f4:37:
                    ac:10:43:49:02:ff:b7:e8:f3:2a:f3:e5:9a:86:3c:
                    e7:bb:0d:9e:3a:b3:37:06:7a:e9:e8:68:e9:43:e7:
                    58:de:ad:19:b3:54:8b:53:4d:2a:de:05:17:17:fc:
                    8b:f9:6e:4d:cb:b7:08:87:50:56:a1:73:a0:9c:58:
                    63:f9:a6:9e:83:52:14:cd:4e:cd:94:87:43:27:07:
                    a9:06:80:a5:24:9d:3e:91:e9:8f:1a:b5:03:ba:39:
                    9e:5c:dc:80:e1:7b:ef:ec:cf:f3:f1:14:db:1f:03:
                    10:00:6d:f9:fe:4b:e9:f3:c9:12:d5:37:32:af:6b:
                    30:ea:b6:13:69:9c:dd:13:8c:19:66:73:0b:8a:cf:
                    91:4e:3c:3c:9e:29:e0:cc:c6:ee:63:53:95:d9:08:
                    41:68:b4:9e:5b:22:30:e8:bc:6c:39:86:e8:12:fa:
                    01:34:cc:7b:7a:7d:2d:cc:f9:41:2a:f1:c7:83:5c:
                    db:29:05:f0:1a:d7:b0:a6:40:03:66:7f:0f:30:90:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:E6:1F:E8:A1:1C:22:46:62:35:CE:C1:E7:C1:7C:1F:4F:87:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:be:8f:22:70:4d:b7:a8:e0:3f:25:d8:cd:50:96:c2:e3:
         71:09:7c:3b:15:05:1c:fb:bd:82:c0:ad:60:a9:b9:35:a2:d5:
         5f:54:3d:48:cd:d8:5a:c1:ea:70:b0:37:23:15:45:7a:40:09:
         f1:7d:a3:aa:53:b9:4b:39:41:9c:fa:08:b5:c4:7b:20:1b:1c:
         11:9e:7c:8e:47:37:a0:f3:52:85:7c:0f:4d:8b:4c:30:84:d5:
         96:7c:b3:40:d8:a6:01:05:59:43:ba:4a:19:e5:0c:6d:2c:3d:
         8d:46:0b:02:93:04:f3:33:65:bb:01:e8:ee:77:da:f7:90:cc:
         3f:4b:ea:34:0a:16:d5:e8:82:30:b5:02:c6:84:9f:0f:c3:53:
         a2:6b:e6:69:70:cc:dd:94:5b:51:10:79:0b:cb:08:7a:6b:00:
         8d:39:28:64:f7:c3:e5:33:e7:ab:e5:35:58:6f:48:21:89:fa:
         bf:ba:31:21:78:a7:1b:20:1a:e8:a7:8a:50:c6:28:20:52:42:
         bc:15:74:86:ab:27:a4:b5:77:1c:78:2b:a1:db:4b:16:d6:be:
         f8:9c:fc:94:05:a8:d7:d0:7a:54:ff:63:11:2e:6c:1c:18:4a:
         0a:ce:79:10:3f:d8:bb:61:f0:74:61:2e:ea:d0:1f:62:a0:3c:
         06:63:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:12:13 2025 by rpki-client