Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cb46b17-5333-3ea5-99d0-1f22664bc2eb.roa
File:                     2cb46b17-5333-3ea5-99d0-1f22664bc2eb.roa (raw, json)
Hash identifier:          JEZLRai9dvKXNhyPtpMMlHq2TMjNgXntkPqCbf/+Q6A=
Subject key identifier:   3A:3C:AB:AC:93:45:E1:DA:0D:12:64:EA:60:FA:9D:FA:6C:4A:6D:17
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC99FA23CF17C003AF3300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cb46b17-5333-3ea5-99d0-1f22664bc2eb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:aa00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:99:fa:23:cf:17:c0:03:af:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6db488a0-9d52-4d7c-bd6a-ce42c133cbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:8a:84:cd:ba:c1:c6:0b:9f:23:c7:9a:fe:
                    e6:86:75:04:e9:6e:fc:75:75:82:63:f1:fc:8a:1a:
                    20:ad:02:46:71:d0:13:4d:66:6c:e9:c0:c8:4e:4e:
                    93:62:8e:6a:74:0c:0d:da:89:d6:c3:d1:8c:16:b6:
                    d0:ed:e0:1d:a5:6c:1d:93:1e:52:82:41:34:fd:66:
                    5d:b2:6d:6f:26:d1:92:07:d8:88:7d:49:5d:95:16:
                    94:3d:0d:4a:8a:60:21:6b:26:ee:4d:be:ad:f7:fa:
                    27:bf:88:61:31:56:85:58:fe:a4:5e:c6:51:09:2b:
                    fc:ad:02:81:08:f2:c9:9e:87:ac:13:96:a0:c4:e3:
                    f5:8c:4f:d2:6a:da:7c:ee:33:1a:11:e9:1c:ee:cc:
                    b9:bd:63:18:ca:13:24:4e:67:01:72:cb:f1:66:01:
                    54:0b:85:8b:87:59:a8:87:0f:8a:c5:20:58:03:c0:
                    d5:43:c4:b5:21:37:aa:c2:df:ee:92:6e:3d:b1:e2:
                    27:a5:71:27:a2:41:4b:6d:0e:77:b6:d5:b7:e5:7d:
                    54:e0:a3:b0:8d:48:60:03:4b:41:b9:a8:77:00:87:
                    67:fd:a8:f4:49:3d:1d:03:b6:0b:41:6c:46:d8:94:
                    82:e4:88:19:91:25:b6:c2:b8:a8:30:f7:87:93:b0:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:AB:AC:93:45:E1:DA:0D:12:64:EA:60:FA:9D:FA:6C:4A:6D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cb46b17-5333-3ea5-99d0-1f22664bc2eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:aa00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:8a:ae:76:62:f5:ce:a5:4c:ed:fe:d8:39:c0:5d:c1:5b:
         1e:a9:97:5a:d1:4c:ac:85:c2:22:d5:e2:d3:df:e1:68:5e:02:
         36:6b:74:c1:fd:9e:5d:8d:cd:ba:31:7d:83:ab:eb:58:8d:6f:
         e5:e4:7c:e3:f0:0f:a2:10:e1:d2:d8:89:f1:4c:53:90:05:da:
         e2:df:5c:87:31:c1:99:9b:33:8b:75:28:22:ea:67:62:f4:a3:
         40:b2:6d:06:0b:76:f0:77:b7:56:b9:6b:5a:08:ed:0c:ad:74:
         12:66:1f:6b:c2:66:3f:c1:66:1d:9e:21:cf:db:6a:69:ae:23:
         5d:48:6a:77:12:93:bd:cf:6b:45:49:a3:0b:9d:3c:56:f8:1b:
         02:96:22:b6:e1:a8:9b:f8:84:7b:c6:71:34:3f:b6:d2:6e:02:
         9b:a8:dc:ad:2a:10:f1:67:39:80:3b:31:de:34:f4:1b:13:c8:
         4e:75:4b:ec:cb:50:a5:6e:aa:96:2e:63:8f:b6:6e:97:f1:20:
         c6:a5:4f:01:2e:e8:f5:3b:f0:57:1e:fc:de:d1:fd:af:cf:78:
         51:4e:5f:b4:9e:87:93:d2:bd:cc:21:80:70:9f:ad:ae:94:5c:
         e1:f8:64:81:a1:7a:97:e6:c4:f8:b5:76:d2:91:62:01:43:47:
         ef:7b:21:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJn6I88XwAOvMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NmRiNDg4YTAtOWQ1Mi00ZDdjLWJkNmEtY2U0MmMxMzNjYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmOKhM26wcYLnyPHmv7mhnUE6W78dXWCY/H8
ihogrQJGcdATTWZs6cDITk6TYo5qdAwN2onWw9GMFrbQ7eAdpWwdkx5SgkE0/WZd
sm1vJtGSB9iIfUldlRaUPQ1KimAhaybuTb6t9/onv4hhMVaFWP6kXsZRCSv8rQKB
CPLJnoesE5agxOP1jE/Satp87jMaEekc7sy5vWMYyhMkTmcBcsvxZgFUC4WLh1mo
hw+KxSBYA8DVQ8S1ITeqwt/ukm49seInpXEnokFLbQ53ttW35X1U4KOwjUhgA0tB
uah3AIdn/aj0ST0dA7YLQWxG2JSC5IgZkSW2wrioMPeHk7AzBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDo8q6yTReHaDRJk6mD6nfpsSm0XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNiNDZiMTctNTMzMy0z
ZWE1LTk5ZDAtMWYyMjY2NGJjMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKoA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH73iq52YvXOpUzt/tg5wF3BWx6pl1rRTKyFwiLV4tPf4WheAjZr
dMH9nl2NzboxfYOr61iNb+XkfOPwD6IQ4dLYifFMU5AF2uLfXIcxwZmbM4t1KCLq
Z2L0o0CybQYLdvB3t1a5a1oI7QytdBJmH2vCZj/BZh2eIc/bammuI11IancSk73P
a0VJowudPFb4GwKWIrbhqJv4hHvGcTQ/ttJuApuo3K0qEPFnOYA7Md409BsTyE51
S+zLUKVuqpYuY4+2bpfxIMalTwEu6PU78Fce/N7R/a/PeFFOX7Seh5PSvcwhgHCf
ra6UXOH4ZIGhepfmxPi1dtKRYgFDR+97IUE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:11 2025 by rpki-client