Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa
File:                     a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa (raw, json)
Hash identifier:          P44yzkLa90oNYI1vL3WUxOPGYOGAzom0AmAKkQ3VoIs=
Subject key identifier:   EB:F8:91:50:D7:B2:E6:B6:B0:24:F8:7D:AE:44:7E:FB:3D:A7:62:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A31B5646CE323B74E0BC89E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d80:380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:64:6c:e3:23:b7:4e:0b:c8:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=a055549d-ec3d-4827-ba7b-195db29f2dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:02:70:e0:45:c8:21:83:08:ee:c5:3d:fd:
                    5d:fe:5d:89:22:2c:da:7d:f6:40:7b:00:b8:f7:0d:
                    f7:14:6e:06:d5:ed:db:96:bd:4e:aa:a6:4c:2f:b5:
                    3c:b6:b1:1e:86:43:07:5a:87:ed:dd:46:b6:4d:a4:
                    a8:f3:21:92:7a:42:35:d4:53:2b:1c:71:0c:d7:60:
                    f7:2e:3a:7d:69:b6:fa:50:58:0a:5b:b7:7c:e0:9a:
                    bc:82:08:f5:19:e1:a3:65:37:09:e5:3b:ad:64:f1:
                    82:ba:d3:b7:a9:ba:f8:09:86:45:69:62:ea:f6:7d:
                    ea:eb:08:8e:00:12:2a:cc:4b:f5:d1:91:10:af:e4:
                    71:6c:5d:a4:58:94:3d:8d:96:26:e0:c0:30:86:b4:
                    84:a8:49:e2:a6:c1:18:8d:dd:cf:e4:ed:ae:7d:9e:
                    4d:48:f3:48:ad:1d:cb:48:76:ea:1b:4e:af:4d:05:
                    85:3e:9c:ce:ab:74:6d:ca:ef:f9:67:7d:67:b1:42:
                    aa:89:c8:dd:80:19:81:38:13:1c:ea:c0:e2:c0:e7:
                    81:bf:06:eb:c9:44:b4:64:c0:80:87:82:59:1e:22:
                    98:6a:1e:96:98:bc:50:29:dd:20:f8:05:b1:21:06:
                    e7:31:36:e9:b3:2a:18:e7:6b:56:06:b2:0e:a3:1f:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:91:50:D7:B2:E6:B6:B0:24:F8:7D:AE:44:7E:FB:3D:A7:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:95:d5:5e:3d:56:8a:2f:ee:75:27:a6:3c:96:3e:75:c3:
         d8:7e:e5:23:0b:c2:12:3b:c7:90:67:d7:e3:9f:91:05:3b:dc:
         af:a0:2e:d6:e6:5e:ac:90:ce:63:6e:5c:57:7e:da:98:e1:a6:
         ae:da:cb:64:df:fb:ed:83:07:b0:1c:a7:5a:d9:29:9c:24:c5:
         f4:95:88:2f:50:6d:40:8e:bb:85:14:7b:6a:28:14:06:a4:57:
         e3:94:08:05:c8:38:a8:5b:56:44:04:28:4b:27:b0:77:7f:a2:
         da:09:a9:e1:1a:0d:28:ef:e4:b3:4b:6f:8d:95:75:61:14:60:
         1e:fc:8a:58:74:fb:51:7b:02:51:79:55:d8:1b:c9:41:b8:31:
         79:55:18:2a:49:d4:c8:98:a3:37:3d:69:86:a6:5a:70:b4:e2:
         16:53:ca:4c:8e:07:24:5e:70:df:4a:89:8f:8c:ac:f6:ae:fb:
         6b:9a:6e:eb:2c:da:84:06:44:c6:f1:c4:18:1d:98:f3:a6:aa:
         11:a5:69:74:17:14:b5:5d:b5:21:af:ee:25:ee:ed:d2:f1:26:
         40:d1:c3:06:61:65:59:d3:32:ec:b1:74:72:22:6c:77:7e:97:
         4f:11:16:cf:cf:a6:e8:1a:94:be:10:6d:77:b0:01:09:cb:6c:
         c3:38:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:54 2025 by rpki-client