Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa
File:                     3980d51d-07db-3b1f-965c-cd48b27da63d.roa (raw, json)
Hash identifier:          eD1m8C3D2VqAAfDpMoczI0oO/O/AfXmQ5xkKqxqALQE=
Subject key identifier:   61:CA:CF:25:26:64:E0:99:10:AB:56:1B:8B:3D:07:64:22:A9:1F:6C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE611BE3B504A8C08EBC20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:7680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:61:1b:e3:b5:04:a8:c0:8e:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a6fa6f0d-bae3-4c9a-987d-69fde1c197c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ee:53:fe:f1:21:fd:ad:bd:34:8b:0f:62:02:
                    39:89:dd:41:0c:f4:13:32:ac:c2:51:5c:02:b7:cc:
                    92:30:7b:25:dc:69:3f:4a:aa:9b:f5:ac:3e:49:90:
                    5c:a6:60:b3:1c:e0:77:4c:16:29:48:6c:75:79:1f:
                    ec:c8:46:5a:0e:8e:b7:c5:ae:50:12:c3:c6:79:62:
                    79:eb:77:a9:5c:a3:55:1d:db:e5:4c:5f:fb:99:ae:
                    79:0d:b6:5c:7d:ec:5f:95:a8:4c:50:8e:94:00:45:
                    01:3d:e1:05:4e:54:74:99:2f:a2:44:94:ea:8a:13:
                    6b:ca:37:b6:ec:58:f1:1e:92:e2:db:0f:da:09:4f:
                    2e:b8:3b:46:72:a1:6c:e6:45:85:0f:47:33:65:3a:
                    db:72:ed:43:ed:dc:5e:4d:c6:7f:23:17:f2:72:95:
                    4d:a4:49:16:03:7e:91:e8:5f:91:c2:ae:97:58:df:
                    f1:67:c7:c4:9c:bb:c6:1e:9a:ec:b8:33:43:2f:01:
                    40:43:2a:70:ae:e9:13:2e:55:90:25:96:4a:c0:96:
                    b3:2a:dc:3d:2b:ee:b4:30:16:6b:fb:39:e7:82:e1:
                    71:60:95:e7:b6:ea:48:3b:f4:2a:6a:f3:f6:f6:6e:
                    1d:3a:24:1e:6d:31:0d:8d:85:20:6d:3e:f3:e8:15:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:CF:25:26:64:E0:99:10:AB:56:1B:8B:3D:07:64:22:A9:1F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:7f:02:05:4a:bd:ca:1f:89:f7:55:34:88:b2:e9:7b:de:
         50:9b:7e:7e:53:47:e3:77:c0:60:83:f9:25:5d:6b:05:c7:75:
         17:22:84:d4:4d:c2:e9:c6:4d:df:9d:ef:47:c4:e2:55:1d:05:
         fb:74:4f:67:d7:6e:2d:f0:56:9b:7d:92:05:dc:34:b7:f5:fd:
         9d:f5:32:24:35:f6:ef:7d:8f:52:77:85:84:8a:9a:63:45:68:
         e4:ae:5e:24:55:5d:2e:f4:68:e9:f0:14:e9:27:54:29:a7:86:
         92:33:e1:0d:dd:ac:fd:73:1a:55:a8:d3:62:98:b3:60:84:21:
         b4:73:8c:e6:b4:a1:b6:d4:8c:f4:ac:31:0e:4b:7d:84:41:04:
         8d:fa:45:4d:f3:0a:98:63:28:28:a9:bc:ef:0c:e0:cf:53:ed:
         78:35:d5:8c:8a:ef:35:49:c9:e1:2e:1b:bf:58:d6:d0:08:58:
         65:ef:ee:72:20:1c:01:6d:af:a6:cb:7a:f6:6a:a0:bb:f0:a2:
         1e:a2:a0:1d:e7:ac:f9:96:e3:74:93:30:41:70:6f:fd:a2:97:
         f3:52:71:96:1a:23:58:18:8c:87:b6:47:79:15:b3:cd:04:5e:
         76:9a:f6:e5:14:fd:e3:15:23:23:d5:03:65:8f:9c:27:8f:f6:
         04:1c:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:58 2025 by rpki-client