Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/07357e1b-6073-3a5b-8ccf-6dbadd691b05.roa
File:                     07357e1b-6073-3a5b-8ccf-6dbadd691b05.roa (raw, json)
Hash identifier:          EkQn97c41urDfZarGR94vI/tt709pCsgoRlFaRsl6ug=
Subject key identifier:   E4:B6:61:64:86:E0:71:ED:D9:93:74:56:92:2F:11:C0:F6:42:B1:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DBFF744AC7079487D0EB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/07357e1b-6073-3a5b-8ccf-6dbadd691b05.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ff:74:4a:c7:07:94:87:d0:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=a5425995-74f9-4dd9-9e6f-fcd365dd7781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:0f:19:63:24:46:82:c2:a0:ab:b2:45:88:
                    8e:04:ed:19:b9:a0:23:22:9d:05:69:a6:93:cf:ea:
                    be:90:5b:68:3b:ac:49:73:86:9a:f3:93:3d:49:0e:
                    44:e6:37:7c:df:f2:ee:07:0a:9d:34:3c:d5:cc:b4:
                    2f:5c:4f:78:67:69:2f:0c:9a:a5:d9:f6:6d:5e:ee:
                    05:18:f5:c1:6e:4e:85:fd:2d:d1:d9:97:eb:56:57:
                    5a:52:38:bf:fe:08:3a:00:66:be:44:a5:5d:5a:91:
                    45:d2:05:ee:12:0a:52:48:fd:b3:5a:10:4b:cd:ef:
                    d0:4b:14:46:c9:d0:83:be:22:c8:c7:1b:71:a4:07:
                    19:02:d4:ef:ec:75:97:69:30:36:df:33:16:8f:0e:
                    72:f2:dc:db:00:0d:97:17:04:5b:07:45:a6:6a:95:
                    a6:16:bb:f3:7f:d2:ed:d6:48:b3:ac:7c:ef:67:b9:
                    b0:c7:0a:a3:30:2d:d6:20:fe:7a:f3:d7:4a:b5:3f:
                    55:0c:6d:02:f0:03:d6:46:1f:26:3d:d5:d9:b0:a1:
                    d4:35:37:ed:c5:aa:94:26:ad:2c:61:a8:f2:da:8c:
                    38:7f:bf:d1:d3:35:52:23:d3:ad:d3:fa:21:e2:df:
                    08:ad:e1:d2:33:e2:37:86:e9:12:0d:f6:d0:a4:48:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:61:64:86:E0:71:ED:D9:93:74:56:92:2F:11:C0:F6:42:B1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/07357e1b-6073-3a5b-8ccf-6dbadd691b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dd:03:03:93:60:40:16:52:37:f4:46:67:0c:94:2a:ad:b8:
         b9:e8:ff:d7:bf:09:8a:0c:06:29:63:ff:b9:2f:c0:de:84:dd:
         68:5a:24:ca:b0:a3:72:4d:6c:aa:8b:60:cb:f3:09:62:f4:66:
         77:57:2b:7b:62:08:37:ec:39:f3:15:84:5a:28:44:53:57:34:
         ff:82:05:85:e2:2b:ca:2e:e5:7f:68:49:af:10:28:ff:da:a1:
         13:af:57:2f:f4:86:a5:98:07:e4:45:6a:3e:df:fd:03:4d:59:
         34:2b:b8:f1:c4:73:ea:c1:c6:5b:43:c0:0e:f4:6a:8f:22:90:
         53:a6:43:13:cf:41:4e:59:4f:46:db:5f:7f:12:ee:96:58:5a:
         37:45:55:5c:ea:e4:34:ea:5b:78:3d:93:d5:f3:42:6b:54:15:
         bd:1d:bd:1e:16:16:c4:a2:7f:84:b1:30:cc:2c:56:25:db:1e:
         11:58:71:c9:c5:d1:f0:09:f4:c5:77:bf:5c:91:e2:1e:b1:40:
         f2:d6:7e:82:24:6b:fb:ce:98:a7:e7:2a:88:ee:d0:3f:a2:ec:
         20:b5:f5:ad:52:f2:4a:8b:de:8e:fc:4e:63:3e:69:4a:3f:98:
         7d:5c:ef:26:35:34:fb:fc:89:a0:05:67:ee:5e:9e:89:17:31:
         35:69:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:01 2025 by rpki-client