Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63137a91-296c-327e-af7c-d5f8c34d49e5.roa
File:                     63137a91-296c-327e-af7c-d5f8c34d49e5.roa (raw, json)
Hash identifier:          zJdKrL9Ws8N+VcBjsFeBKzTOG9b8yUXr6uYSioiTOsk=
Subject key identifier:   DB:D3:91:1D:57:24:1E:19:74:DA:24:8A:03:96:C4:A5:56:55:2F:63
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84123FA0FC906FF07B958500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63137a91-296c-327e-af7c-d5f8c34d49e5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:a280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3f:a0:fc:90:6f:f0:7b:95:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=daf9c050-5369-4876-95b5-17733df2b83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:d4:d9:dd:d9:30:bb:76:0d:ba:c5:11:24:
                    60:b7:bf:be:05:91:cd:5e:b7:dc:3c:8c:cf:b3:f6:
                    b8:40:80:38:e7:78:ff:04:3d:33:37:3f:69:45:5b:
                    74:18:39:c0:f0:8d:d8:f7:11:8b:3e:96:8c:91:8f:
                    c8:3c:63:8c:fe:06:f6:34:dd:1a:2d:4b:00:d3:bc:
                    f9:71:34:3a:97:7d:5c:29:8c:a8:a7:43:bc:67:1a:
                    6d:c0:0e:b1:a0:11:5b:fa:6e:ad:f3:d0:43:60:78:
                    3f:5e:f2:32:2c:97:07:d6:36:b2:ce:91:56:ac:2a:
                    1e:1c:a1:6b:67:a5:98:bc:58:af:5c:93:09:fb:85:
                    49:7a:c3:d5:57:6d:10:41:2a:9e:32:0b:b2:64:ea:
                    31:25:5f:d5:dd:fb:f7:dd:72:c5:1e:b7:3e:42:e1:
                    85:7c:70:59:98:7e:dc:f8:4a:21:46:f4:52:dc:ec:
                    a2:f1:14:19:b2:aa:25:fe:8a:04:59:21:57:5a:ae:
                    bd:c9:0d:e9:c9:c1:8f:74:a1:9b:38:32:11:9b:e0:
                    a8:e7:9f:d1:b8:84:b9:85:e1:92:34:1b:fd:6d:09:
                    dc:c5:c6:06:c5:e7:09:91:4f:f6:1d:1a:c9:7d:16:
                    24:06:4a:cc:54:39:34:5f:7a:c1:95:b5:8f:24:df:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:91:1D:57:24:1E:19:74:DA:24:8A:03:96:C4:A5:56:55:2F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63137a91-296c-327e-af7c-d5f8c34d49e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:e6:42:81:f8:51:e8:b2:c7:e7:28:19:f8:8a:50:31:13:
         2f:79:c4:06:8f:6c:7a:53:dd:e5:53:d6:bf:03:56:1c:01:47:
         48:ba:39:71:cb:61:0a:f0:89:93:8b:e4:28:ae:cc:2e:07:75:
         50:bb:da:a3:a9:b3:59:55:17:4b:44:4b:70:7f:5a:00:7c:af:
         3d:42:91:96:d8:d0:ee:df:02:65:50:cc:dd:51:42:34:3d:2c:
         41:7d:e7:94:79:17:b9:de:64:62:63:f9:d0:dd:04:87:6e:51:
         28:63:9d:18:9d:34:c4:50:34:62:10:68:95:cb:a8:d3:fd:b6:
         37:b3:27:db:ac:f6:f1:36:dc:af:45:70:f7:bc:4c:60:01:26:
         65:e5:fe:d8:e6:ba:13:4b:a3:53:2e:d4:b7:ed:9b:dc:09:6b:
         f9:6b:e0:e4:b2:07:cc:b1:a5:5e:b3:35:34:c8:38:43:78:9a:
         38:b8:63:b8:da:40:e7:2f:75:84:5b:cd:56:3c:e0:82:cc:32:
         cd:e2:d8:40:ea:39:a1:14:79:b5:2e:60:d5:dc:a4:a4:69:6c:
         90:a7:2c:b3:18:5e:cd:26:72:8d:0a:95:ba:ed:2e:20:e6:d0:
         01:cf:8a:7e:ce:ac:54:c0:7e:a1:c6:cc:42:0a:12:bb:de:0a:
         77:f7:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:50 2025 by rpki-client