Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea83466-451e-30a9-ae8f-6476ebf8ae4d.roa
File:                     2ea83466-451e-30a9-ae8f-6476ebf8ae4d.roa (raw, json)
Hash identifier:          pvJ1jSVkU6xEUwoe/xiQY+ostIxMiEw1euy1TnfTjxU=
Subject key identifier:   12:3C:DA:7E:FB:85:FC:77:44:80:1F:D8:58:1B:34:87:02:0B:0C:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124C31C8FEF9AD494976C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea83466-451e-30a9-ae8f-6476ebf8ae4d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:a200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4c:31:c8:fe:f9:ad:49:49:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=94598f23-d6c0-494e-9c71-b2c8a9f88845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:94:c4:66:9c:f0:15:e5:66:f7:c5:5f:f4:
                    e8:83:fa:9d:ae:89:8d:b0:0d:9c:0a:50:2b:3e:81:
                    0a:e5:ef:84:25:da:5d:b0:13:ac:a8:b5:39:a9:87:
                    15:55:b9:24:eb:48:a9:ed:a2:f7:2e:a1:b6:7c:69:
                    74:08:ae:28:42:e5:88:cd:f3:e7:67:cb:58:7f:be:
                    ba:3d:0d:c0:26:27:93:a2:30:78:46:36:36:e3:a4:
                    f8:dd:49:61:40:f7:8d:42:01:a4:24:7e:b9:99:6d:
                    1b:5a:34:65:ba:2b:c3:0b:40:86:ce:3a:f9:52:34:
                    d0:ad:20:c8:f0:50:a9:2c:7a:21:da:4b:31:4b:98:
                    3e:e0:29:b7:2b:6b:9c:14:05:db:c3:b9:da:0d:12:
                    60:cb:7a:41:f6:fa:dc:cb:37:fe:d9:a7:b8:f2:ac:
                    41:ed:26:75:1f:5b:9b:d8:6a:b1:60:64:07:69:a8:
                    c4:7a:6a:12:97:91:98:5a:9d:ab:f1:d6:70:03:df:
                    7d:aa:8e:7d:c6:43:64:47:32:b1:1e:2a:3d:66:cb:
                    5c:e9:28:d6:95:bb:81:a2:fe:d2:58:88:9b:ae:68:
                    85:18:1c:5f:b0:95:80:79:28:db:57:af:49:a3:b8:
                    70:73:59:43:93:9e:72:c7:96:ae:99:17:44:cd:1e:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:DA:7E:FB:85:FC:77:44:80:1F:D8:58:1B:34:87:02:0B:0C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea83466-451e-30a9-ae8f-6476ebf8ae4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:64:76:ac:41:65:6f:d7:40:38:be:da:a7:df:d5:d9:c6:
         ae:6f:3b:ae:96:4d:77:bb:20:e4:04:98:a4:91:a2:5c:be:e1:
         4f:a0:07:8d:5e:b1:07:34:cb:01:2e:e8:13:19:c6:c6:97:87:
         a0:28:89:76:71:29:03:a8:32:80:b0:9f:3d:dc:8c:d6:0c:69:
         a9:7c:53:6a:bf:02:d6:d4:9a:ee:63:9b:c9:21:18:25:dc:7f:
         49:8b:2b:72:f3:65:f1:95:04:29:16:de:af:0b:48:8a:99:de:
         c4:f5:35:68:3e:37:f2:76:a4:72:17:12:51:2d:99:58:66:61:
         f9:ee:5d:fa:46:c8:d8:a8:e6:22:46:f1:08:79:ed:85:a2:04:
         8d:06:bc:67:19:6c:ba:66:58:ce:fe:15:a4:41:3e:d4:d1:58:
         b2:05:ac:cf:36:7d:85:07:b7:8f:42:e4:2c:27:e7:d9:1c:2c:
         4d:80:b4:12:32:c6:d7:e7:e8:2f:0f:1b:c7:b2:3e:b2:71:d8:
         9d:78:dd:1b:bd:5e:8f:5f:e3:43:6f:20:ec:63:9a:1f:11:dd:
         c5:ac:c9:fe:25:17:bc:e8:2e:97:70:51:64:3f:21:27:d3:3d:
         25:94:94:f6:35:d0:bd:a5:68:d1:d0:15:9d:ab:db:21:e3:b0:
         46:b7:f5:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEkwxyP75rUlJdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTQ1OThmMjMtZDZjMC00OTRlLTljNzEtYjJjOGE5Zjg4ODQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgWUxGac8BXlZvfFX/Tog/qdromNsA2cClAr
PoEK5e+EJdpdsBOsqLU5qYcVVbkk60ip7aL3LqG2fGl0CK4oQuWIzfPnZ8tYf766
PQ3AJieTojB4RjY246T43UlhQPeNQgGkJH65mW0bWjRluivDC0CGzjr5UjTQrSDI
8FCpLHoh2ksxS5g+4Cm3K2ucFAXbw7naDRJgy3pB9vrcyzf+2ae48qxB7SZ1H1ub
2GqxYGQHaajEemoSl5GYWp2r8dZwA999qo59xkNkRzKxHio9Zstc6SjWlbuBov7S
WIibrmiFGBxfsJWAeSjbV69Jo7hwc1lDk55yx5aumRdEzR7IFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBI82n77hfx3RIAf2FgbNIcCCwz4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmVhODM0NjYtNDUxZS0z
MGE5LWFlOGYtNjQ3NmViZjhhZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABsDZHasQWVv10A4vtqn39XZxq5vO66WTXe7IOQEmKSRoly+4U+g
B41esQc0ywEu6BMZxsaXh6AoiXZxKQOoMoCwnz3cjNYMaal8U2q/AtbUmu5jm8kh
GCXcf0mLK3LzZfGVBCkW3q8LSIqZ3sT1NWg+N/J2pHIXElEtmVhmYfnuXfpGyNio
5iJG8Qh57YWiBI0GvGcZbLpmWM7+FaRBPtTRWLIFrM82fYUHt49C5Cwn59kcLE2A
tBIyxtfn6C8PG8eyPrJx2J143Ru9Xo9f40NvIOxjmh8R3cWsyf4lF7zoLpdwUWQ/
ISfTPSWUlPY10L2laNHQFZ2r2yHjsEa39f8=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:36 2025 by rpki-client