Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45bcc2c2-581f-3d3a-ae5a-c737d884c171.roa
File:                     45bcc2c2-581f-3d3a-ae5a-c737d884c171.roa (raw, json)
Hash identifier:          6Pd8ZduNYCezfITElQnZhmkBSC90wRwk2+/W4+8FrC4=
Subject key identifier:   98:B1:B3:FE:07:FF:18:41:28:CC:84:8C:01:9D:3E:C9:E8:C8:E9:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C97BDB4B6D8041888980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45bcc2c2-581f-3d3a-ae5a-c737d884c171.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:7b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c9:7b:db:4b:6d:80:41:88:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4a98a93c-bd02-4f57-97cd-69019d6c89bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:a5:be:60:2b:c3:ff:c5:73:72:fc:a2:c1:
                    a1:d8:16:b1:76:1b:44:3c:15:08:eb:dd:ab:1d:1b:
                    f2:8a:1a:9a:bb:55:c1:36:9d:bf:3b:3b:7b:28:ac:
                    5a:b4:5d:58:62:c5:ec:67:73:84:9c:e7:c5:84:d4:
                    6e:cb:e5:0a:9d:cb:3c:e1:1d:77:68:44:64:5e:81:
                    d0:73:1d:36:6e:4f:39:2f:03:0e:7a:31:88:64:84:
                    02:52:ff:3d:41:4d:a7:9d:18:b5:f7:d5:8c:31:b4:
                    8a:4d:66:dc:b1:c8:81:18:70:47:3c:f3:cd:70:55:
                    2c:9a:63:27:bb:7c:da:7c:a8:a8:00:5b:8f:f5:4f:
                    2a:59:f8:34:c4:52:00:cf:d3:38:b6:cd:7a:e9:e7:
                    92:ef:17:1f:02:79:24:0b:bf:7a:bc:e1:b8:5f:70:
                    a8:8c:f7:c2:c4:b6:17:f7:53:ed:e0:d5:df:56:8f:
                    29:ce:a9:5f:a6:32:08:43:ad:b9:76:57:2a:0b:61:
                    06:8e:f2:ec:21:d1:8a:48:54:be:84:93:de:35:49:
                    f8:43:3e:d7:e5:a4:c0:32:fe:d9:fb:a6:fc:9a:79:
                    19:d5:bd:ac:a9:d5:64:d6:17:11:fe:76:d6:1a:d5:
                    6d:ed:cb:67:35:10:c6:09:4e:ea:f9:d8:c5:3d:ef:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:B3:FE:07:FF:18:41:28:CC:84:8C:01:9D:3E:C9:E8:C8:E9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45bcc2c2-581f-3d3a-ae5a-c737d884c171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:0d:f3:9b:56:fa:d5:d7:95:df:98:5a:64:e9:4b:6d:3f:
         56:84:29:e4:af:b5:b1:87:93:41:5e:c7:b2:77:ac:01:34:37:
         f8:48:d4:89:8f:d4:01:dd:d2:31:aa:81:bc:d0:c9:6c:63:df:
         82:4c:54:2a:8b:c1:60:ef:0a:89:a1:23:48:df:11:ff:da:8b:
         e8:ab:50:fe:2b:e6:f6:a9:c7:12:1b:ed:6a:07:d2:79:97:76:
         75:5d:b0:ae:c0:dd:eb:ee:5e:bc:a1:43:8c:e6:99:15:78:40:
         77:e7:fa:30:3b:e4:5e:37:3e:ad:d8:3b:18:62:be:3d:87:cb:
         18:7d:85:60:4e:54:84:85:52:07:15:e6:3d:24:4a:33:e1:dd:
         e5:70:36:36:98:21:4a:8b:5b:aa:13:fd:be:b6:27:4e:2d:19:
         35:6e:b9:27:b7:45:50:ba:d2:07:69:d6:00:b2:5b:73:8a:fe:
         b8:34:d6:d7:0c:5b:55:f3:3f:3b:f0:0b:88:2f:37:66:3f:e3:
         cf:c7:78:b9:c8:80:84:79:7a:4f:d3:cd:db:92:1a:c9:93:48:
         b3:f9:8b:6f:d7:10:15:90:a7:8f:e4:05:2f:1e:2d:cd:aa:db:
         8a:ce:35:4e:ec:4f:b0:b6:6c:ae:c6:fd:cf:f1:ba:87:7c:b2:
         02:6e:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:24 2025 by rpki-client