Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa
File:                     3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa (raw, json)
Hash identifier:          GZ2iZX8BsWrv5ilmI8EEWQFoUle3yb4wrHeYXfnKD2I=
Subject key identifier:   0F:F2:91:B5:08:0C:F0:FE:D4:AD:65:9A:78:DA:92:F7:FA:99:B4:CB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410CAF74B9B71306EBD30C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:ca:f7:4b:9b:71:30:6e:bd:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bd62d7dd-e015-4a87-bf4c-db166bc6f006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:73:53:de:e7:0f:38:37:47:b5:68:e9:e1:
                    b2:60:27:17:19:2c:45:a7:a7:35:24:51:de:3e:3b:
                    f1:b4:e8:ca:5f:74:ba:d3:20:ec:57:7a:3b:e1:70:
                    2f:ef:6c:7d:ef:3d:8b:26:e3:fa:d1:96:3e:f1:8f:
                    d9:54:a7:45:83:b1:d6:fa:04:d7:12:e4:8c:08:30:
                    20:58:50:d4:71:dc:9b:ce:5e:44:21:bf:44:06:4f:
                    c0:ac:26:a8:3f:0f:e9:f8:22:eb:a5:78:02:40:fa:
                    e3:90:8c:03:63:99:61:bb:f8:62:36:45:9b:37:c4:
                    da:71:9a:e4:cf:5c:f3:0b:b8:f2:68:ff:e8:a1:59:
                    62:db:7d:37:b6:8a:47:e2:d5:3d:6d:74:e2:2d:1c:
                    4a:61:47:79:0c:d2:17:96:31:9b:2a:b0:eb:53:10:
                    f2:9c:ea:e3:2b:b0:2a:c9:f1:f7:5d:1b:7b:af:2a:
                    d1:04:e2:fc:79:a5:c5:40:53:ca:96:38:fd:9d:7f:
                    af:53:d4:e8:f1:e2:c4:9d:e4:75:2f:59:27:d7:78:
                    0c:8b:4c:7d:d6:80:63:f8:ba:82:ad:ca:eb:a3:4d:
                    94:91:d8:8d:e8:4a:1a:d8:b7:0a:2a:25:05:2c:8c:
                    05:6d:8b:d1:dc:6c:78:a1:06:0c:3a:24:3c:45:75:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F2:91:B5:08:0C:F0:FE:D4:AD:65:9A:78:DA:92:F7:FA:99:B4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8e2618-af2c-37a8-8319-7fe2cc7332a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:bd:fc:9f:ec:08:0a:a7:94:37:c1:68:cb:5b:d4:2f:b3:
         9e:d2:02:27:eb:10:78:23:da:8a:78:bc:57:50:03:e7:02:7f:
         7e:20:cb:8c:1a:aa:54:f6:b1:95:2a:aa:78:83:0b:a9:2d:c8:
         06:a8:94:16:36:60:b4:71:ff:5b:21:62:0c:4e:00:6c:64:dc:
         03:c2:87:76:4c:3e:1f:de:bd:ea:41:0b:05:08:d9:da:94:bc:
         c1:d9:b2:52:4d:72:25:10:83:0e:21:63:1e:2e:41:c4:d7:84:
         98:78:b7:4c:54:7a:3b:dc:5f:4e:74:db:36:28:17:92:5a:b5:
         e4:41:4a:36:ea:72:63:46:f8:a0:aa:c7:2d:dc:a2:8b:f5:71:
         8c:67:4d:5f:83:fd:c9:51:eb:7e:b0:14:3a:97:f3:d6:8d:b3:
         b9:eb:ad:74:13:96:89:a7:a8:13:67:f2:d9:a1:6e:6e:dd:a1:
         33:85:8d:31:8f:e5:a6:64:38:c2:f4:a2:3e:e9:fe:4d:95:95:
         03:3a:e5:9e:b7:2b:f1:11:ec:36:61:76:e8:63:e4:26:2b:49:
         61:44:f3:39:ec:35:ff:6e:72:a9:02:5f:31:b8:0d:8f:be:40:
         3c:2a:18:d8:b5:50:40:ab:e0:63:50:0f:fd:07:6d:b9:ec:98:
         71:17:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:25 2025 by rpki-client