Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa
File:                     11bb1a26-aa2c-3dfd-b959-a33694de395f.roa (raw, json)
Hash identifier:          NqHFhfCYZpdi83CRGIO+yEwspiybwMtsmCDOKyCtxBs=
Subject key identifier:   6D:C8:C1:FF:7A:87:B0:DB:B8:39:FD:B3:4A:A3:62:03:04:01:38:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410E53F4CA00C0E7AA064F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:b280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e5:3f:4c:a0:0c:0e:7a:a0:64:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fe94d427-60a6-4903-b9a0-b5357178bb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:af:63:82:94:a8:cd:42:a8:69:ab:8f:e9:
                    da:30:3e:2e:5a:6d:37:89:3a:aa:95:87:76:8f:f9:
                    60:11:6f:3d:61:41:7d:91:a2:c6:cc:51:d1:9b:c5:
                    4c:3c:4e:53:2c:cd:80:3c:f5:33:b1:93:31:b5:82:
                    71:0e:58:35:c9:ed:70:3b:fe:6a:1e:fb:12:b2:14:
                    57:96:3d:3d:a8:37:23:b7:16:eb:f6:f3:75:f2:05:
                    f1:97:71:70:ff:9e:9f:1e:30:f9:66:6f:5d:94:2f:
                    4e:39:0e:09:13:d8:34:0f:de:c5:7d:d7:bc:26:83:
                    d3:18:d0:01:18:29:9c:8f:6c:95:58:dc:51:16:c4:
                    1f:d9:6e:7d:03:b6:83:40:28:17:84:de:fe:6b:1c:
                    97:7d:1a:52:08:58:0e:57:08:4d:b8:43:f8:f4:0f:
                    bf:68:4d:52:ff:da:2e:53:70:a9:aa:89:80:5c:31:
                    79:ce:1c:4c:91:49:2e:eb:a0:76:85:67:c9:98:b4:
                    46:ce:b9:c6:3e:be:7c:30:76:87:34:a5:d5:88:44:
                    dd:5c:99:e5:0a:45:96:48:ca:1c:84:7e:c4:0f:e9:
                    16:dd:ee:67:4e:4d:da:63:40:ce:66:1b:a2:80:dc:
                    a1:9c:fe:dc:a1:a4:38:a8:96:95:8e:69:26:8d:7c:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C8:C1:FF:7A:87:B0:DB:B8:39:FD:B3:4A:A3:62:03:04:01:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c7:60:fa:85:1d:a9:43:bf:cb:40:bf:3c:a9:1d:33:6d:3f:
         f7:33:6a:5b:65:2a:2d:3c:6a:2b:f4:86:34:60:a0:b0:dd:be:
         f8:1c:15:db:0c:2c:8b:d0:a7:f0:71:43:4d:a0:5d:51:8d:e4:
         7d:dd:4e:f3:79:33:b1:cf:31:c7:02:79:03:d7:93:3f:37:ad:
         f1:40:fe:a8:bf:ba:05:7d:1b:f5:96:83:b6:1a:5f:6d:6e:8b:
         13:81:d5:a0:2d:ed:f6:7c:fc:e4:dd:5b:ad:67:c1:0b:d3:d4:
         4f:2d:db:be:47:18:f7:73:c3:0e:94:4b:e7:6e:15:69:f9:e5:
         dd:f8:b8:c2:96:7c:a4:10:17:55:5e:a2:c3:8b:1f:bd:e8:60:
         19:d0:b2:3c:e8:6a:3d:01:a0:d1:e7:e3:94:44:b5:2a:86:5e:
         7f:69:e4:5c:fb:10:18:24:6a:84:3a:2b:28:ae:df:c4:78:fa:
         51:e5:f5:8a:88:b1:2e:2d:fa:53:8a:95:a0:e3:fb:04:15:b9:
         a7:42:ec:93:d8:22:9e:10:2a:1a:6e:84:9e:40:45:18:0a:bc:
         35:ec:bc:95:c2:a1:41:8c:9f:17:63:96:98:65:3b:f0:94:77:
         25:e9:44:7e:69:4d:d8:b3:48:77:b9:f7:84:13:b1:2c:ae:23:
         b3:82:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:50 2025 by rpki-client