Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1279689e-c9e8-3902-a53f-da7a4cd06c2d.roa
File:                     1279689e-c9e8-3902-a53f-da7a4cd06c2d.roa (raw, json)
Hash identifier:          2lWiRvQrnknffkaqIy3CxA69og838yWDU5SJD3ovSQE=
Subject key identifier:   76:E8:58:46:4D:D3:37:15:9B:8A:D4:1C:33:49:00:38:A9:85:76:46
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B0FA6B76A2DAEA66C8C784440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1279689e-c9e8-3902-a53f-da7a4cd06c2d.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     30036
IP address blocks:        2604:2d81:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b7:6a:2d:ae:a6:6c:8c:78:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=49d5a139-3029-40c5-bc03-395cbd410f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:4b:de:82:83:bc:6f:91:3b:e6:ae:fa:6f:
                    7d:cc:b3:10:cb:04:9e:2f:88:c6:33:34:19:df:e7:
                    2e:3f:2a:de:79:62:69:19:b4:d2:65:5d:a0:5f:84:
                    24:bd:e0:7e:a0:a1:e2:5a:9c:65:07:89:7b:b0:7b:
                    18:72:45:fe:d3:cd:74:f7:9f:20:81:90:2e:eb:fe:
                    c5:ac:c2:27:c5:55:4a:44:80:dd:d2:70:89:af:e5:
                    8c:e8:b1:5c:16:55:ac:15:47:a9:0d:15:0b:94:99:
                    35:40:1b:2d:90:7b:aa:23:c2:02:77:4a:46:17:eb:
                    88:80:e1:9b:ce:75:eb:ce:d6:2f:1e:b9:30:16:81:
                    ca:8f:22:fa:6a:b5:9b:80:aa:0e:18:cf:74:53:97:
                    cb:90:41:6b:ae:b9:d6:a0:7e:41:7b:3b:8e:e3:39:
                    73:d7:3c:91:40:ba:18:64:63:61:53:5b:b6:57:21:
                    23:d2:4e:67:f3:09:e2:89:9b:9e:44:35:6f:0e:31:
                    d4:c1:a7:f3:1b:12:12:74:a8:c6:3e:47:3f:73:ad:
                    6d:11:3a:be:89:e8:2e:05:16:bb:17:12:39:60:54:
                    99:31:9d:24:74:4b:a0:70:31:5c:ab:64:31:7d:4a:
                    96:da:82:c4:d1:0f:0d:93:00:37:b6:5e:83:5b:a0:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:58:46:4D:D3:37:15:9B:8A:D4:1C:33:49:00:38:A9:85:76:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1279689e-c9e8-3902-a53f-da7a4cd06c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:c6:d7:c8:eb:ca:26:6d:1c:1b:4c:e1:ca:62:cc:03:37:
         71:85:c5:4a:bf:89:5c:3b:15:43:29:46:e8:9b:13:55:05:1b:
         74:ef:25:1c:d5:ed:c0:5b:3f:d8:38:cd:ec:52:f7:3a:ea:ae:
         b2:8c:04:34:79:22:c7:e5:69:28:64:23:c3:65:07:a8:41:2a:
         a4:66:cc:8b:48:e2:28:70:82:3c:31:a8:54:6e:68:49:8e:29:
         89:88:a9:26:09:0e:0e:d4:f6:fd:78:ed:f8:23:9b:8f:34:ce:
         f0:14:7c:67:3c:b1:56:a6:1c:90:77:9a:42:83:ad:8a:06:2d:
         cb:25:17:da:f3:f9:55:bc:c2:5c:73:14:54:90:96:12:6d:c2:
         68:f9:3f:f5:cd:75:4f:2d:90:33:92:69:6d:c1:0d:35:29:d2:
         7c:84:42:e1:53:0b:e3:cc:7a:be:23:84:1e:df:b5:26:79:86:
         50:43:39:69:3d:6b:25:d7:29:ed:85:d2:89:a2:64:7e:00:77:
         e7:ea:b0:f2:ed:cd:eb:2c:d2:d2:cf:fd:1d:3c:76:e0:87:9f:
         9d:df:53:ea:4c:05:79:16:ec:f6:0f:be:b5:19:1b:66:b8:68:
         9d:a9:4c:1b:53:47:c7:bc:fc:b8:75:f0:9a:12:1a:4d:11:92:
         84:fd:a7:a1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsPprdqLa6mbIx4REAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk
NDlkNWExMzktMzAyOS00MGM1LWJjMDMtMzk1Y2JkNDEwZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEdL3oKDvG+RO+au+m99zLMQywSeL4jGMzQZ
3+cuPyreeWJpGbTSZV2gX4QkveB+oKHiWpxlB4l7sHsYckX+0810958ggZAu6/7F
rMInxVVKRIDd0nCJr+WM6LFcFlWsFUepDRULlJk1QBstkHuqI8ICd0pGF+uIgOGb
znXrztYvHrkwFoHKjyL6arWbgKoOGM90U5fLkEFrrrnWoH5BezuO4zlz1zyRQLoY
ZGNhU1u2VyEj0k5n8wniiZueRDVvDjHUwafzGxISdKjGPkc/c61tETq+ieguBRa7
FxI5YFSZMZ0kdEugcDFcq2QxfUqW2oLE0Q8NkwA3tl6DW6AsQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHboWEZN0zcVm4rUHDNJADiphXZGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI3OTY4OWUtYzllOC0z
OTAyLWE1M2YtZGE3YTRjZDA2YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa1XG18jryiZtHBtM4cpizAM3cYXFSr+JXDsVQylG6JsTVQUbdO8l
HNXtwFs/2DjN7FL3OuqusowENHkix+VpKGQjw2UHqEEqpGbMi0jiKHCCPDGoVG5o
SY4piYipJgkODtT2/Xjt+CObjzTO8BR8ZzyxVqYckHeaQoOtigYtyyUX2vP5VbzC
XHMUVJCWEm3CaPk/9c11Ty2QM5JpbcENNSnSfIRC4VML48x6viOEHt+1JnmGUEM5
aT1rJdcp7YXSiaJkfgB35+qw8u3N6yzS0s/9HTx24Iefnd9T6kwFeRbs9g++tRkb
ZrhonalMG1NHx7z8uHXwmhIaTRGShP2noQ==
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:23 2025 by rpki-client