Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
File:                     76b314a2-1ada-3cc9-93bf-0713174d9917.roa (raw, json)
Hash identifier:          zs8Kni8ppvnQuZODpWMgqn0sisj+84DVFU8oARWj6bo=
Subject key identifier:   D1:13:51:C2:8C:35:5E:F1:5B:ED:7D:77:E3:70:B2:F1:76:CA:5D:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F3808293C2859F2458140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d81:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:38:08:29:3c:28:59:f2:45:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=c7d8d140-f92e-4a87-bb0e-721f00c3ca32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:a5:28:e1:a5:a4:38:5a:ed:2c:ef:c2:0b:
                    fa:7b:49:c9:fd:f6:98:be:75:fd:ea:64:e7:9b:50:
                    90:03:37:ec:b7:d6:9f:e7:b1:ed:28:27:d5:c1:ff:
                    e3:2e:61:70:8e:b9:4f:7c:bb:e4:62:b0:07:26:b1:
                    a8:aa:26:28:2a:1d:55:47:91:64:3d:cb:a3:e5:9f:
                    0b:62:72:cf:35:85:ce:08:ee:52:e5:19:00:ca:7d:
                    7c:15:44:37:2e:4e:85:05:69:d6:f5:43:3c:cd:31:
                    00:84:bb:19:34:98:73:26:e6:ff:5d:a3:61:6c:33:
                    b2:4c:b8:59:fd:71:7e:a5:57:ae:9c:26:dc:f3:62:
                    87:0e:5e:ef:c8:b6:ab:b4:3f:30:31:bb:cd:54:9b:
                    ab:3c:3e:d7:2d:77:07:ab:fd:2e:07:e3:cc:56:07:
                    3e:e7:86:d8:ec:e8:47:b3:4a:ba:b2:f4:7b:d4:20:
                    a9:bc:32:79:2e:28:90:7f:1c:f3:1a:d8:ec:78:b7:
                    e0:c4:2d:49:b8:12:14:a1:27:d7:9d:e6:fd:79:e3:
                    f3:9a:41:62:22:96:08:29:58:8f:6c:55:b2:be:03:
                    75:a2:ff:37:62:9f:19:c9:d5:33:ba:64:33:69:05:
                    64:33:ce:f1:01:17:1e:bc:42:22:11:8c:ae:9e:e6:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:51:C2:8C:35:5E:F1:5B:ED:7D:77:E3:70:B2:F1:76:CA:5D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:ca:0c:d4:ad:8d:4d:83:5c:4e:6d:d7:84:d6:78:db:b1:
         d7:42:b5:16:d3:e6:62:4a:0e:78:b1:00:2e:ce:eb:47:44:ec:
         ac:bb:5c:f7:3f:b5:67:a7:f2:e1:99:f5:84:e7:ae:4a:fe:e6:
         8c:8a:18:03:01:ef:d0:39:b5:d5:aa:d1:fe:68:ba:6e:c6:c5:
         f2:30:54:5b:87:31:ba:75:78:8b:11:9e:7b:3f:28:8b:88:9d:
         b0:19:2b:03:61:5c:f5:f7:0c:e6:df:3d:34:b8:ae:52:60:30:
         30:e1:d6:34:94:72:b6:94:58:01:ba:c9:37:52:6f:7e:05:96:
         1c:70:a1:1e:35:36:c8:4d:3b:85:85:6b:50:d2:e3:f0:16:4c:
         69:82:be:ad:45:eb:af:6c:8a:ca:1e:7d:14:09:d3:a9:59:d3:
         4c:ac:d2:a4:cf:95:88:29:53:dc:14:0a:a6:3b:17:c0:75:70:
         de:58:53:5c:56:14:1e:01:e1:0c:d9:aa:4f:f1:d0:ab:f2:cc:
         46:9c:f5:4a:73:f3:09:54:55:d1:7b:36:e6:e4:66:31:fb:bc:
         e2:46:10:ea:80:88:63:82:b3:9d:c2:d5:fd:c3:b7:d2:f1:e7:
         91:67:ef:71:63:13:18:03:e0:69:47:32:81:f6:0c:98:1c:04:
         20:5e:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:42 2025 by rpki-client