Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01bc5b85-121d-3650-bdf1-59c5359d1d87.roa
File:                     01bc5b85-121d-3650-bdf1-59c5359d1d87.roa (raw, json)
Hash identifier:          sgWPYF/FQJUKrP9Ygdqlw9/kYVLRPgo+8iwhzIxWLN0=
Subject key identifier:   4E:03:08:7E:26:5F:A4:2E:B5:D9:07:29:09:43:09:06:11:43:BD:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B4D611EBA236B8FEBA3B95600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01bc5b85-121d-3650-bdf1-59c5359d1d87.roa
Signing time:             Wed 24 Sep 2025 15:40:38 +0000
ROA not before:           Wed 24 Sep 2025 15:40:38 +0000
ROA not after:            Tue 23 Dec 2025 16:40:38 +0000
asID:                     19905
IP address blocks:        2604:2d80:d200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:61:1e:ba:23:6b:8f:eb:a3:b9:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 15:40:38 2025 GMT
            Not After : Dec 23 16:40:38 2025 GMT
        Subject: CN=c4cd7981-9c10-42be-95de-19fc9ebf03c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:ef:b9:1c:20:3a:7e:67:59:58:86:56:3f:
                    27:ef:61:ac:d8:c7:26:d4:30:68:b0:bd:66:75:99:
                    71:0e:5b:07:e0:f0:1e:e4:1a:9f:e9:d8:97:bd:7e:
                    fb:1a:68:f8:7d:54:31:5c:83:4f:95:1f:f8:0a:1f:
                    14:e8:89:0c:09:c6:fc:a9:aa:94:02:1e:0c:30:03:
                    7f:eb:f1:79:18:04:0b:6d:7f:78:c9:c5:75:bb:0d:
                    33:7d:ea:a1:c4:31:1e:89:9f:13:14:a8:44:12:f9:
                    23:f4:18:01:9c:a4:1a:88:d7:14:b8:da:7f:0d:c0:
                    05:c8:87:81:ca:f1:40:e4:f1:37:0b:e0:8d:10:26:
                    da:fa:d8:3d:1c:5e:c2:80:09:ce:c8:f5:a4:73:b2:
                    fb:d8:3a:42:f6:f6:0f:41:d8:a7:f8:a7:50:25:df:
                    00:26:83:69:4d:d0:3f:6f:4b:5d:51:4b:43:81:1c:
                    b0:7e:0c:ae:00:7b:f6:45:c5:07:a0:b4:d1:10:38:
                    be:31:0f:f2:b5:3e:ce:8c:37:b2:a1:b4:bc:91:93:
                    88:0a:98:9e:ba:26:c7:ac:f3:5c:b8:ce:f9:d8:75:
                    de:2b:6b:d4:67:b2:80:83:98:2c:b4:87:8b:98:de:
                    6f:7e:bc:67:4f:74:15:ed:8f:b4:09:a6:fe:34:56:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:08:7E:26:5F:A4:2E:B5:D9:07:29:09:43:09:06:11:43:BD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01bc5b85-121d-3650-bdf1-59c5359d1d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:69:c2:0c:6d:61:6d:08:30:de:28:72:19:b5:5f:fb:10:
         12:0f:c9:9e:ab:5e:fa:7f:90:11:99:d1:57:b5:a0:ac:1d:8b:
         66:5b:ad:30:20:ac:91:67:6f:73:99:f4:76:b4:75:42:eb:66:
         b2:0d:60:1d:18:aa:ff:78:c3:59:c7:21:09:5e:b4:a9:bd:ce:
         b6:20:a6:df:66:01:c3:7a:bf:95:cd:ba:ee:09:0b:cf:80:f1:
         31:4b:1e:c7:f7:9d:d1:0a:8a:d8:c1:b9:06:26:39:83:a5:31:
         8a:18:1f:65:39:4f:a9:1d:9c:bd:83:eb:d7:0b:48:09:a0:dc:
         c0:66:f4:2f:4f:e9:67:10:de:ac:27:44:ef:f5:1d:02:7b:eb:
         79:7b:d6:6c:63:97:a7:02:ea:3e:c6:48:e1:02:b5:11:c8:ae:
         58:2d:e8:1e:d4:6a:64:a4:b7:9c:af:9d:9a:36:7d:f7:f0:8c:
         49:6b:6a:46:3e:fb:1a:92:d7:07:f2:c8:41:a6:a5:d9:00:0a:
         62:8f:4c:3d:1c:51:1e:04:f5:4f:2c:c3:d9:a4:c8:68:52:86:
         14:05:53:0e:d6:fb:5f:80:23:74:80:44:9f:e0:fa:67:df:87:
         96:e2:69:c3:a9:b9:93:a6:f1:a0:63:cb:f0:4c:51:1e:59:ef:
         09:50:39:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNYR66I2uP66O5VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkyNDE1NDAzOFoXDTI1MTIyMzE2NDAzOFowLzEtMCsGA1UEAxMk
YzRjZDc5ODEtOWMxMC00MmJlLTk1ZGUtMTlmYzllYmYwM2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9zvuRwgOn5nWViGVj8n72Gs2Mcm1DBosL1m
dZlxDlsH4PAe5Bqf6diXvX77Gmj4fVQxXINPlR/4Ch8U6IkMCcb8qaqUAh4MMAN/
6/F5GAQLbX94ycV1uw0zfeqhxDEeiZ8TFKhEEvkj9BgBnKQaiNcUuNp/DcAFyIeB
yvFA5PE3C+CNECba+tg9HF7CgAnOyPWkc7L72DpC9vYPQdin+KdQJd8AJoNpTdA/
b0tdUUtDgRywfgyuAHv2RcUHoLTREDi+MQ/ytT7OjDeyobS8kZOICpieuibHrPNc
uM752HXeK2vUZ7KAg5gstIeLmN5vfrxnT3QV7Y+0Cab+NFb4fQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE4DCH4mX6QutdkHKQlDCQYRQ724MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDFiYzViODUtMTIxZC0z
NjUwLWJkZjEtNTljNTM1OWQxZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD40acIMbWFtCDDeKHIZtV/7EBIPyZ6rXvp/kBGZ0Ve1oKwdi2Zb
rTAgrJFnb3OZ9Ha0dULrZrINYB0Yqv94w1nHIQletKm9zrYgpt9mAcN6v5XNuu4J
C8+A8TFLHsf3ndEKitjBuQYmOYOlMYoYH2U5T6kdnL2D69cLSAmg3MBm9C9P6WcQ
3qwnRO/1HQJ763l71mxjl6cC6j7GSOECtRHIrlgt6B7UamSkt5yvnZo2fffwjElr
akY++xqS1wfyyEGmpdkACmKPTD0cUR4E9U8sw9mkyGhShhQFUw7W+1+AI3SARJ/g
+mffh5biacOpuZOm8aBjy/BMUR5Z7wlQOac=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:11 2025 by rpki-client