Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bf19be-54ec-3216-b905-06684579d017.roa
File:                     d6bf19be-54ec-3216-b905-06684579d017.roa (raw, json)
Hash identifier:          3ubj6tzhARSP5zzlFQHxi9Up51unHj6N8AGWC5goPSw=
Subject key identifier:   C2:82:EC:30:DB:6B:FE:6D:55:4B:46:95:F0:90:A0:69:65:9D:67:0C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BB45D0C3B856F680AEFAFEE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bf19be-54ec-3216-b905-06684579d017.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        2604:2d80:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:0c:3b:85:6f:68:0a:ef:af:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=87ffb022-3d5c-4a5d-a176-359dd253010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:9a:36:3c:9a:d3:f3:e4:b9:ef:9b:e4:02:
                    fb:e1:77:3c:90:92:ce:25:5a:c0:e0:3e:79:43:7a:
                    30:44:6b:46:f1:24:7b:bb:36:ad:ef:e7:d6:17:85:
                    a2:d6:02:48:3f:ce:a5:82:cc:77:d0:7e:3c:11:b3:
                    76:d4:10:d7:8c:ae:71:c6:03:26:2a:a6:f0:b8:ce:
                    b0:db:73:a6:7d:33:b5:1c:11:9d:37:21:d6:0f:5c:
                    27:35:51:67:63:4f:ce:ac:68:8f:de:0d:73:02:22:
                    f9:99:6a:6c:c3:03:cf:0d:4c:66:15:82:82:5e:f6:
                    e9:62:36:0e:4a:49:77:02:9f:b1:fc:b8:86:ac:3a:
                    29:6d:e4:61:ad:af:39:31:f0:0b:55:3e:ba:6d:4a:
                    29:ef:99:68:0c:8e:95:20:60:f0:33:75:78:05:5d:
                    97:50:ef:d0:42:69:84:e7:b4:bc:62:2f:31:3c:b3:
                    a0:47:b1:84:9e:56:07:a1:7d:79:17:21:0e:b8:b6:
                    8b:8a:af:f5:11:ca:87:c7:52:0a:5c:05:2d:6c:27:
                    e6:f8:03:16:05:a4:72:a7:1c:bd:24:cc:a9:77:1c:
                    e0:f9:df:86:6e:bc:dd:9b:30:12:95:be:6b:1e:a7:
                    11:96:a1:5f:c4:cc:11:0b:e7:d5:66:f2:1f:4e:08:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:82:EC:30:DB:6B:FE:6D:55:4B:46:95:F0:90:A0:69:65:9D:67:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bf19be-54ec-3216-b905-06684579d017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:c7:b7:d1:c9:fa:85:6d:b3:cc:49:1e:47:bd:63:7b:10:
         86:c7:0d:f0:72:e5:ae:8e:20:6b:7e:b8:11:97:a9:9c:e0:b7:
         ce:48:41:1d:7c:7c:77:6f:69:1a:c1:47:01:ef:b0:b9:73:4d:
         05:a9:61:2f:68:fd:83:49:b9:fa:7f:46:c6:45:f5:7e:cd:00:
         ed:b9:f6:0a:bd:9f:9f:65:0f:7d:75:c1:3e:75:6c:bf:b1:3d:
         bb:a9:d8:5e:52:97:d5:d9:55:3f:83:f8:8a:29:9a:0b:e0:09:
         80:69:a5:f2:97:04:da:bf:ab:d5:88:ca:d5:78:27:f3:de:cf:
         a3:4d:91:a5:c3:6c:9b:16:26:74:96:dc:8b:c1:4f:5f:73:6b:
         26:5e:ee:ae:82:ae:a4:b2:0c:81:72:ab:d2:a5:39:90:3c:51:
         e9:71:af:6f:af:d4:6f:64:dc:e9:11:cd:23:49:6d:10:83:b9:
         5a:e7:82:4d:52:33:43:8b:95:86:fc:b8:d3:f8:dd:2d:26:23:
         50:a3:5c:66:c5:55:5d:4b:62:dc:e4:f3:d7:ed:b0:d3:92:dc:
         9e:b3:64:79:ba:ab:c7:8b:c9:da:ef:b3:82:25:cd:c6:80:70:
         c8:58:21:27:97:a9:37:d8:06:09:bb:df:ad:d7:64:40:96:b9:
         e6:db:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:14:08 2025 by rpki-client