Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c05ad78-12e2-3832-b01d-8a59e005e3d9.roa
File:                     5c05ad78-12e2-3832-b01d-8a59e005e3d9.roa (raw, json)
Hash identifier:          /a46GTuiekRECIzB6GafShBz/ODOlj8nEJZNcEAizaw=
Subject key identifier:   2B:05:AE:94:4E:D6:4A:6F:39:9A:A4:64:E7:FF:44:A8:CC:85:33:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B617416A6312D90124F1A8B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c05ad78-12e2-3832-b01d-8a59e005e3d9.roa
Signing time:             Wed 01 Oct 2025 20:15:01 +0000
ROA not before:           Wed 01 Oct 2025 20:15:01 +0000
ROA not after:            Tue 30 Dec 2025 21:15:01 +0000
asID:                     19905
IP address blocks:        2604:2d80:300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:74:16:a6:31:2d:90:12:4f:1a:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 20:15:01 2025 GMT
            Not After : Dec 30 21:15:01 2025 GMT
        Subject: CN=6f47524c-c065-499d-aabc-3bef59c89320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:95:a9:30:5e:4c:95:e8:c5:b2:4e:c6:6a:
                    83:f4:7e:d7:1d:cb:ff:44:04:be:2e:b9:d4:57:59:
                    c7:a6:5e:9e:fa:c0:17:b1:83:72:94:99:8a:c0:d2:
                    29:92:4f:b9:f2:ef:0d:5a:31:a2:74:7f:2a:cb:c3:
                    d0:45:51:1b:11:ea:d0:4d:31:c3:cd:e1:c6:f9:c1:
                    ad:d0:6e:9d:46:0a:a1:ab:0f:d1:02:37:8e:79:da:
                    e5:d4:34:35:ed:89:23:09:98:3a:f1:bc:75:94:d3:
                    92:f9:2b:37:4d:7a:21:b3:9a:06:9b:19:17:ef:9e:
                    6b:80:81:16:bd:1e:c5:fb:04:91:f7:c5:94:fb:67:
                    b9:21:2f:4b:4c:96:ab:f1:ea:df:a9:76:d3:10:2d:
                    58:22:fb:9a:f4:87:82:b7:60:12:a0:99:ed:2e:a4:
                    d7:9b:6d:75:3c:21:65:07:1c:68:7c:2f:4d:8f:e9:
                    75:aa:28:ed:ce:36:08:69:7e:a6:47:26:02:d0:88:
                    4f:26:a5:91:1e:40:5f:9b:5a:56:f9:5e:65:f4:f4:
                    8a:7d:5f:19:24:aa:56:6b:93:de:30:f1:2b:b1:0f:
                    f1:25:43:51:24:8b:3e:a9:e5:d7:be:44:63:6f:19:
                    3c:cf:91:ef:f0:b7:c5:3c:a8:dd:2b:61:17:2a:9b:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:05:AE:94:4E:D6:4A:6F:39:9A:A4:64:E7:FF:44:A8:CC:85:33:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c05ad78-12e2-3832-b01d-8a59e005e3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:ed:01:7e:84:97:a5:7e:f1:dc:3a:b6:a8:49:48:12:aa:
         d0:04:90:cf:0a:b7:f6:d4:94:72:54:58:62:b0:c5:51:cb:1a:
         1d:86:7a:17:19:be:b6:57:77:c3:d7:0a:45:af:07:6f:51:52:
         c8:c4:ba:5d:35:79:31:90:2e:c7:b1:dc:89:75:b9:37:12:9d:
         97:9b:a0:bb:c8:34:06:d5:12:6c:00:61:fb:2f:7b:84:6c:cc:
         b7:c2:06:4c:41:7d:22:48:05:b5:34:82:95:dc:1f:cc:da:9d:
         34:12:45:e9:1b:ef:7d:7f:8b:93:32:7d:88:bd:a1:6c:ba:f2:
         b4:9b:f0:92:81:4d:7e:48:2d:d9:01:7d:49:2e:33:33:fc:9e:
         4f:1f:83:74:7a:b5:79:cd:d6:2a:a6:7d:1b:a9:75:32:6b:51:
         90:ff:c8:0d:40:4d:25:69:af:55:d9:5d:80:65:b0:4f:03:dc:
         14:cb:06:5c:27:38:70:e2:2b:42:10:8a:53:0f:9e:63:f5:5c:
         e2:49:36:ff:c7:31:2a:ba:c6:b7:87:b0:58:5f:0d:fa:63:60:
         2c:3a:02:25:37:94:8f:51:03:91:1e:0f:c7:48:e2:03:2a:15:
         17:f0:a4:b9:0f:f7:3d:0c:82:18:2f:02:bc:db:d0:c3:78:e2:
         0c:a5:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:09 2025 by rpki-client