Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa
File:                     2c086c93-996f-33d5-a43f-da04919abcd7.roa (raw, json)
Hash identifier:          ldyXRYK86MricAM7QGfCKC/6Met5XXDsPtmDtX6ZMSc=
Subject key identifier:   23:06:AD:15:74:92:BD:9D:AD:29:38:E2:4D:99:28:95:EF:4F:DB:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A2C200A64B0CA2061F426DD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     30036
IP address blocks:        2604:2d80:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:0a:64:b0:ca:20:61:f4:26:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=51d4d5ba-7843-4722-8554-85381d47dcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:07:8e:77:ed:0c:5a:b7:1b:53:66:24:a0:
                    72:0c:0c:9d:3d:6c:7a:28:97:19:d0:aa:f8:5b:a4:
                    40:0d:74:45:af:ab:5c:72:dc:7c:0b:a1:0a:1e:12:
                    f0:5a:0f:c0:ab:be:d5:b0:5a:b6:37:69:37:f9:ab:
                    10:b2:7c:ec:5b:9a:d8:15:a1:59:45:79:cf:13:b7:
                    9f:88:8a:39:58:83:17:ff:5d:ae:11:e9:eb:fa:8a:
                    0a:9b:2a:66:ea:54:9a:99:06:6e:28:03:ef:27:84:
                    db:50:9a:7a:57:98:08:4b:64:14:da:c0:9d:44:6e:
                    78:e1:c7:f0:63:c2:f1:1b:21:4e:ef:d6:64:f4:75:
                    b8:a5:0f:8d:b3:4d:6e:55:8c:5c:a6:71:03:e8:c1:
                    41:94:87:fa:92:2d:50:52:08:6d:b5:00:2b:63:a5:
                    63:00:81:ba:54:34:fa:f2:1b:97:f7:66:ff:91:19:
                    46:db:6d:44:f4:f3:35:d0:32:bb:b0:3d:67:12:53:
                    a7:77:9d:8c:ad:1f:6e:c9:62:a4:18:10:a5:c5:0a:
                    88:04:e4:3b:f8:0e:5b:0e:49:d8:e8:cb:70:d2:e2:
                    48:9f:df:5e:bf:19:17:73:88:c5:13:64:c4:17:e2:
                    3f:f1:e9:1c:9f:4b:47:0f:30:d1:e4:a5:42:db:3a:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:AD:15:74:92:BD:9D:AD:29:38:E2:4D:99:28:95:EF:4F:DB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:48:75:0f:37:cb:a3:c5:a8:0a:ab:20:8d:f3:57:7d:95:07:
         ce:ac:95:36:1f:1b:b5:5e:50:5f:86:f0:b0:7c:6a:2c:79:08:
         ef:a4:ba:f1:51:94:c8:d6:4b:63:44:6d:77:da:07:30:60:2e:
         ea:cd:b9:c9:88:bc:b2:7a:e7:0e:9b:a4:ca:c2:26:58:4d:70:
         85:46:75:6c:ee:7d:b0:3a:22:f0:09:8a:37:7a:c6:d1:0a:bc:
         d9:0f:93:ac:13:05:b3:e9:b5:9b:a0:94:eb:7f:9b:86:51:32:
         ca:3b:5a:60:36:ed:fc:cc:e3:59:11:33:fc:81:75:6d:cd:23:
         7e:ff:ad:49:b5:05:81:a3:e4:2b:67:21:b3:f6:a9:bb:b9:09:
         e8:f8:56:26:26:64:f1:99:f0:69:ae:ae:0c:3a:43:65:b2:1c:
         25:9d:dd:84:e7:41:e7:32:11:da:61:b4:d9:99:cb:e0:ce:c5:
         3f:73:80:1f:c2:97:93:6b:43:5e:08:6a:7a:46:b2:03:b2:71:
         8f:75:19:b5:11:3a:7d:a8:ae:00:60:8f:60:1e:f4:e2:fe:a6:
         cc:f3:ab:0a:01:00:e3:2c:8a:d6:1b:49:96:ca:b7:b3:f7:82:
         4f:81:69:5a:b6:4b:39:ac:e7:22:6a:fb:8a:13:d7:d7:e9:2f:
         0c:84:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:53 2025 by rpki-client