Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa
File:                     efbb9d9c-3bca-31f8-83ab-151a905e688b.roa (raw, json)
Hash identifier:          n0qf0I7hDJTZvMwowq3TJuMBTjBb0BOW1ZmCT9SWIv0=
Subject key identifier:   5E:44:EE:28:F5:7E:1B:50:6C:C2:D4:3C:78:52:E9:87:08:04:D7:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F01A7EE5B3C3AC67D3BC3140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        2604:2d80:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:7e:e5:b3:c3:ac:67:d3:bc:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=d5e04edd-48ac-486e-87b5-12b7fc226aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:bd:e5:af:00:e0:c6:bd:98:64:d7:06:a1:
                    07:f7:81:46:46:40:ce:01:0a:8c:6e:e0:17:80:58:
                    ef:bc:79:e6:12:31:21:7f:4a:9e:e3:c6:2b:0a:41:
                    86:d3:96:b1:90:c0:a7:18:8f:b8:61:9e:b6:a8:57:
                    88:7c:fe:26:21:2f:4d:95:63:09:5a:af:2b:1d:c4:
                    bd:3c:57:ab:da:b0:2d:39:90:a8:5b:6f:37:7f:e2:
                    77:79:49:2b:33:09:1c:f2:72:93:4b:ac:48:0e:07:
                    0d:60:d1:7d:6c:2c:58:65:96:27:b1:69:df:89:4a:
                    9d:31:13:af:79:f2:a0:33:3d:d5:8f:ff:14:de:c8:
                    e1:dc:06:d5:5f:31:81:8d:fd:70:ce:f0:1f:81:c5:
                    c6:47:bc:88:6e:71:81:f2:9a:0a:77:ac:f4:92:fd:
                    2c:15:40:0d:9e:f7:ee:cf:67:25:e2:b9:1c:25:4d:
                    07:28:94:56:34:2d:70:ac:14:8a:45:7f:93:f1:f8:
                    e9:7b:ec:7b:21:d0:be:35:a3:50:fc:f2:9c:b2:a4:
                    cb:cd:0d:d8:cf:85:8d:b5:a0:6d:d0:e0:a2:13:8e:
                    2f:f7:f0:cd:a9:60:8f:92:22:f5:7b:03:97:48:c9:
                    7a:84:78:12:fe:31:f5:64:24:6b:15:02:65:e5:3c:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:44:EE:28:F5:7E:1B:50:6C:C2:D4:3C:78:52:E9:87:08:04:D7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:be:88:fc:c4:1f:48:02:4c:9e:4e:db:49:ed:8c:4d:88:
         e9:52:7c:e2:1f:94:51:bd:e3:00:51:6c:b1:d9:23:98:bc:51:
         eb:d1:92:67:84:bc:7b:6e:a3:e2:60:a4:40:5a:f7:45:dc:5a:
         37:35:97:d8:3a:49:4b:1a:ea:63:ca:52:d6:c2:34:93:72:33:
         e5:09:44:84:ef:42:ff:f2:6d:16:60:a4:04:de:8a:58:96:ba:
         e5:98:dc:85:5d:86:1a:a4:9c:bb:6c:1c:6e:d9:93:34:88:ec:
         80:18:eb:11:9e:47:0b:79:a5:be:56:25:7f:43:b4:1f:ff:4a:
         59:9e:dd:df:39:89:c7:3d:d8:cd:53:ba:48:09:9a:52:7b:8f:
         c6:e5:f5:02:d0:3c:a9:ba:2d:59:3c:e0:ae:0d:67:9c:15:c8:
         f9:3d:e9:9b:a7:bd:5e:db:ba:10:c9:0b:4a:ee:e0:b4:07:82:
         f5:d1:ba:8b:ca:8c:54:b7:64:77:02:e9:b8:3b:db:60:76:cb:
         07:77:67:1b:1c:49:75:25:85:7f:0a:11:f6:51:7d:2e:94:47:
         80:47:8c:ab:4c:19:cf:11:bc:7a:b6:fe:16:78:ac:6b:6a:9e:
         f5:ac:f8:7b:bb:ac:8b:e8:a3:ac:42:95:55:4a:d6:bc:33:24:
         be:63:55:40
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnwGn7ls8OsZ9O8MUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk
ZDVlMDRlZGQtNDhhYy00ODZlLTg3YjUtMTJiN2ZjMjI2YWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8G95a8A4Ma9mGTXBqEH94FGRkDOAQqMbuAX
gFjvvHnmEjEhf0qe48YrCkGG05axkMCnGI+4YZ62qFeIfP4mIS9NlWMJWq8rHcS9
PFer2rAtOZCoW283f+J3eUkrMwkc8nKTS6xIDgcNYNF9bCxYZZYnsWnfiUqdMROv
efKgMz3Vj/8U3sjh3AbVXzGBjf1wzvAfgcXGR7yIbnGB8poKd6z0kv0sFUANnvfu
z2cl4rkcJU0HKJRWNC1wrBSKRX+T8fjpe+x7IdC+NaNQ/PKcsqTLzQ3Yz4WNtaBt
0OCiE44v9/DNqWCPkiL1ewOXSMl6hHgS/jH1ZCRrFQJl5Tw91QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF5E7ij1fhtQbMLUPHhS6YcIBNd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWZiYjlkOWMtM2JjYS0z
MWY4LTgzYWItMTUxYTkwNWU2ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgBww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIqe+iPzEH0gCTJ5O20ntjE2I6VJ84h+UUb3jAFFssdkjmLxR69GS
Z4S8e26j4mCkQFr3RdxaNzWX2DpJSxrqY8pS1sI0k3Iz5QlEhO9C//JtFmCkBN6K
WJa65ZjchV2GGqScu2wcbtmTNIjsgBjrEZ5HC3mlvlYlf0O0H/9KWZ7d3zmJxz3Y
zVO6SAmaUnuPxuX1AtA8qbotWTzgrg1nnBXI+T3pm6e9Xtu6EMkLSu7gtAeC9dG6
i8qMVLdkdwLpuDvbYHbLB3dnGxxJdSWFfwoR9lF9LpRHgEeMq0wZzxG8erb+Fnis
a2qe9az4e7usi+ijrEKVVUrWvDMkvmNVQA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:53 2025 by rpki-client