Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa
File:                     40632924-d2c6-3776-b198-401eaa82937c.roa (raw, json)
Hash identifier:          dwlK64W9ENfxiDOdpW98bTxFqXufS+3fbE1hvzeQwwA=
Subject key identifier:   FB:DC:42:F1:07:F4:DD:DA:F8:B3:38:CA:6B:8A:5E:3C:58:C3:A7:75
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146308D02AC269F6127F150
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2d80:b100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:30:8d:02:ac:26:9f:61:27:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=3d297a3c-54b3-40e1-b2d3-10a32bcabd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:f7:16:0d:c6:71:1b:82:9f:6b:8d:78:84:
                    86:70:6d:4a:a3:c3:39:41:bc:ba:4c:71:ec:63:79:
                    0e:b6:4b:c4:f5:27:a8:7b:dc:60:c8:6e:d9:84:51:
                    b1:e5:13:6a:a9:6d:5e:ef:3e:fa:1d:aa:0c:a4:d0:
                    e5:95:cf:fe:e3:16:ae:09:dd:a8:1b:fd:75:7d:1e:
                    49:00:29:f1:41:ee:68:18:7c:f2:85:dd:ac:87:98:
                    e3:a2:51:8e:96:70:f3:4c:e6:b7:79:97:8a:69:db:
                    c4:46:96:14:59:f5:d0:1d:9c:76:c7:81:e3:d9:21:
                    51:8c:49:d1:6c:b6:8e:ab:22:e5:52:41:2d:3b:02:
                    b6:8d:f7:05:a8:32:55:a1:63:6b:09:ef:3e:4b:33:
                    7f:dc:58:99:eb:3a:cb:58:1b:e3:16:de:5a:1f:9f:
                    e6:5b:1e:e1:2b:3b:58:fb:2b:a5:45:78:65:7f:1e:
                    a9:fc:64:62:5c:46:18:80:9b:48:c3:7a:bc:d5:09:
                    07:ca:fc:21:06:dc:4b:be:24:a5:43:ed:d0:c2:80:
                    cc:b8:e2:d6:98:7c:81:14:70:47:e9:2a:0a:36:16:
                    76:c1:ea:c6:12:5d:b6:6a:d9:53:ac:d2:a3:0b:fb:
                    e5:2a:11:79:25:98:f7:ab:fd:b9:8b:bf:2d:42:22:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:42:F1:07:F4:DD:DA:F8:B3:38:CA:6B:8A:5E:3C:58:C3:A7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:62:dd:03:bc:a1:0f:8a:fb:4d:68:b4:3a:54:0a:3a:9a:
         22:97:35:62:ba:38:b3:82:1d:bd:b9:e0:7d:14:60:d1:67:64:
         ab:8a:2a:67:aa:11:69:9e:cb:e1:d6:3f:3a:63:f1:80:fb:c0:
         ef:80:61:a5:46:3c:61:0f:ef:02:77:b7:8e:47:91:bb:58:bd:
         18:74:0e:ef:2f:33:e2:a2:75:e2:73:77:0b:66:f8:37:24:6b:
         9b:32:20:ee:c2:a2:5c:3b:66:0f:a4:b6:86:d2:fe:15:67:b9:
         e0:22:7b:27:70:45:08:d0:8e:a4:19:66:9b:4a:6d:af:f6:de:
         60:df:0e:ad:f5:aa:06:b9:28:73:42:6a:04:dc:d3:a2:e8:8b:
         7a:d3:41:b1:23:21:6e:f0:ae:d5:25:5f:a3:28:77:cb:0e:9f:
         da:1f:64:de:62:d6:db:70:b5:c2:5d:bd:e0:ab:c7:32:6a:84:
         98:a2:e1:90:c3:66:b0:6c:8e:79:a1:5d:17:93:b1:d9:4a:5a:
         cc:ec:52:92:66:3f:0c:39:29:2c:2f:e4:db:9d:f5:9f:94:28:
         de:c1:f1:f9:1f:cf:8e:b5:f5:fb:57:e3:cd:55:71:cb:73:e2:
         da:73:8b:58:82:ea:cb:8f:dd:29:9d:08:3c:4c:fa:a2:74:7d:
         b8:49:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:18 2025 by rpki-client