Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b330d5-8244-34ae-89de-5df1c161b36e.roa
File:                     d6b330d5-8244-34ae-89de-5df1c161b36e.roa (raw, json)
Hash identifier:          S9VEQrJjIHrj16RmgoocbcbEqQ3xOs26I1BIOq2lPTY=
Subject key identifier:   CD:F8:02:AF:98:09:BF:B0:B3:A3:19:5E:6A:0A:79:20:F5:1A:12:9F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6A04C55D192A121F81C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b330d5-8244-34ae-89de-5df1c161b36e.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:d780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6a:04:c5:5d:19:2a:12:1f:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=60fad46b-5386-49ac-a9d9-bbe570d923e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:31:8f:8a:42:78:6e:20:4f:43:71:2f:f2:8c:
                    ea:5d:7d:b3:2f:7f:9d:ad:6a:e0:6c:96:bb:d1:ee:
                    36:ea:e1:82:51:5d:86:41:2c:75:fb:64:40:4f:bf:
                    2c:f3:75:91:4b:99:bc:c9:27:bc:8b:67:8d:01:1c:
                    7d:bc:d8:9b:86:9b:aa:91:f9:5d:6b:72:e8:ee:f3:
                    fa:48:3a:ef:08:56:4a:89:a5:36:a1:84:db:c9:03:
                    95:e3:5c:33:0d:2b:d3:0a:2e:ff:c1:d1:e8:c8:a1:
                    0e:58:cc:db:7e:e6:e9:3f:ca:2c:8c:2d:0c:5a:41:
                    8d:3a:30:5b:94:dc:3c:62:5e:99:50:1b:0c:72:19:
                    3a:4f:a8:be:c5:ba:a9:33:eb:7a:2c:39:40:cc:05:
                    8e:64:b5:b1:e7:29:f7:be:b5:e6:e1:65:64:5a:bc:
                    d9:43:46:99:02:93:b6:0d:0a:d1:f8:1f:3a:ca:33:
                    46:a7:6d:5e:4e:2e:c4:44:48:7c:61:c7:00:1c:08:
                    b1:cf:32:0c:39:7b:a6:a2:fa:a1:9e:f1:ed:c5:b2:
                    47:9e:7d:df:4c:29:75:cf:51:ca:51:c3:40:a9:6d:
                    79:e3:dd:5f:20:ce:4f:09:02:96:e5:0f:6e:a2:a2:
                    a0:7e:1c:ef:f8:76:67:d1:13:66:5b:b8:dd:e6:c6:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F8:02:AF:98:09:BF:B0:B3:A3:19:5E:6A:0A:79:20:F5:1A:12:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b330d5-8244-34ae-89de-5df1c161b36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:54:a3:5d:f2:7d:3a:7f:ca:56:48:2e:43:33:d8:ef:8b:
         12:53:f5:e8:ce:ee:2f:f6:7a:7a:b1:d5:16:65:99:f4:96:5b:
         4e:37:38:63:ad:31:c4:df:07:76:7c:db:d9:97:51:c3:71:3c:
         1d:1e:53:bf:19:20:25:09:30:cc:6a:84:5d:94:59:c1:8c:02:
         f9:46:61:9a:2f:e0:96:e3:93:91:d6:ae:73:1b:7c:9a:19:81:
         94:f1:ab:11:09:d9:07:5f:b3:33:a7:0d:92:03:a2:42:89:36:
         3b:a2:ba:83:7b:0a:1e:33:2c:f4:2c:21:19:90:0b:7b:ca:3e:
         aa:cb:4b:bb:56:9c:50:0d:41:43:86:c2:d5:84:ca:e9:47:1b:
         0d:10:6a:0d:09:d8:e0:5b:64:47:81:2e:ae:e0:77:12:86:c3:
         53:a3:1d:4e:c1:1f:8a:db:fb:aa:47:a6:96:38:7a:6b:88:5e:
         17:e2:a3:24:0d:de:91:ec:f0:07:7a:ba:da:20:10:24:59:65:
         63:d3:69:69:22:e8:eb:6d:74:2b:ff:68:c9:bc:37:d3:19:5d:
         25:b5:fa:c1:29:07:2e:67:6f:48:d6:07:74:6e:68:ae:34:0d:
         b0:31:5e:14:72:53:5b:d6:75:f0:86:1d:2a:ef:fa:86:1f:97:
         89:7d:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:28 2025 by rpki-client