Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/061a4682-1223-3d1f-b062-113b3555f6dd.roa
File:                     061a4682-1223-3d1f-b062-113b3555f6dd.roa (raw, json)
Hash identifier:          LRFz8E8Ka8Y8FdXHE1JaHfGwIGXmU+pyp4hgoZhz+ik=
Subject key identifier:   97:5F:97:84:8B:57:58:1D:AA:47:27:C8:96:B3:AB:F4:F8:99:0F:E5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C8C7557C5B60BA07BA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/061a4682-1223-3d1f-b062-113b3555f6dd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c8:c7:55:7c:5b:60:ba:07:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f772fb42-be52-498a-8700-a0cf0ccbd977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:f5:2f:66:7c:71:8c:f9:f8:8f:5d:20:c7:
                    09:1b:d8:35:c3:2a:87:09:76:e2:9b:d7:ab:ce:28:
                    55:1f:75:bf:84:80:48:a7:5c:e7:50:ba:44:fb:80:
                    cb:43:99:87:81:4a:b9:a1:21:10:cd:72:54:76:7a:
                    ff:b9:14:b9:4b:55:89:45:52:6c:19:2b:6d:b2:1f:
                    74:8f:5c:36:84:30:ef:9c:bf:21:09:c8:30:93:d6:
                    f1:84:98:a4:bf:eb:fc:18:91:fc:bd:94:fe:18:92:
                    fb:d1:d5:19:12:9d:7a:d9:14:c4:ec:fd:b2:a0:88:
                    11:da:a6:87:f0:0c:fd:24:bc:4b:64:1d:51:79:3b:
                    72:d3:79:51:9e:7b:5b:2e:06:80:6a:36:d1:68:20:
                    64:82:a2:4a:fc:09:70:1a:6e:f1:0d:b9:97:10:0b:
                    13:79:85:cf:1a:33:a3:8d:52:29:09:d4:ef:08:ff:
                    a6:8b:5a:f4:c6:14:a4:18:87:b0:4f:bf:f2:17:e3:
                    08:bb:ed:ab:22:c6:12:c1:01:ce:06:e1:27:79:2c:
                    10:63:4f:a2:02:f4:71:db:8b:20:53:95:45:6d:a3:
                    ce:30:c4:d7:a4:48:be:e7:68:dd:39:a9:97:69:31:
                    78:65:46:ab:bb:18:df:cb:5c:84:f9:60:3c:ca:60:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:97:84:8B:57:58:1D:AA:47:27:C8:96:B3:AB:F4:F8:99:0F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/061a4682-1223-3d1f-b062-113b3555f6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:98:ee:6f:b9:94:f9:2b:5e:80:e8:25:b6:f0:85:84:46:e6:
         b5:37:0f:7b:34:89:5a:18:4c:43:7c:5d:27:9f:37:00:a5:7b:
         16:70:90:99:b9:47:c0:33:88:91:88:ce:68:05:b1:4e:57:40:
         df:42:6f:e0:48:bc:9f:9b:4e:87:4a:f1:00:9c:2a:37:44:4b:
         31:2a:fb:59:8f:d4:7e:7e:88:0e:3f:25:d4:b0:f1:8a:85:a0:
         99:61:5d:d6:c0:83:6d:fe:06:ac:c2:36:bb:b4:b7:6b:dc:95:
         8e:56:88:55:61:2d:49:8d:9d:76:fc:11:a7:7b:cd:76:e8:4b:
         54:61:1b:54:16:70:0a:7a:4c:d4:47:87:0f:a0:6e:75:c3:cc:
         bb:34:2e:71:9d:89:5d:9d:b2:1d:da:3c:64:c2:22:fd:f8:03:
         c8:78:fc:37:1c:1e:55:c2:fc:32:45:43:94:b3:fc:a8:ea:29:
         aa:4c:a6:9b:83:5a:e4:0f:c9:e1:6c:10:e9:d7:08:38:a8:ef:
         4e:e5:21:cb:15:91:7f:87:c3:b7:75:ab:54:fb:46:4b:4e:9e:
         99:61:3b:e3:3c:c1:ac:8a:83:9e:d2:d3:e7:63:57:4a:61:54:
         55:72:86:bb:b2:2f:54:bb:87:b0:da:8d:0f:1f:ad:08:ae:b2:
         bd:57:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:15 2025 by rpki-client