Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6477dab7-7ce8-3b63-b324-b5cb94b05359.roa
File:                     6477dab7-7ce8-3b63-b324-b5cb94b05359.roa (raw, json)
Hash identifier:          ao4jKAtEg4EKZ6zKNxn4JxYE2COx37VNSgDaGfdzBfk=
Subject key identifier:   F8:CB:90:9D:E9:A7:4B:24:2F:3B:5F:4F:AD:9C:22:75:DC:13:72:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B663205A8A3AA9700E5D97400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6477dab7-7ce8-3b63-b324-b5cb94b05359.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:dd80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:05:a8:a3:aa:97:00:e5:d9:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=1710456a-589a-4bb7-a721-e065df87e446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:2c:65:f8:6e:1c:40:00:7a:6e:6c:69:b9:
                    96:2a:67:6d:68:1b:fc:44:40:f4:fd:1e:30:06:ab:
                    58:31:67:8d:89:20:fe:6c:12:ae:e7:a8:f2:93:c3:
                    f8:19:76:0e:1c:f7:36:71:e8:8b:e9:a2:be:33:e3:
                    e2:63:95:50:e1:06:1f:7b:8f:1b:c9:8e:27:e6:65:
                    11:1c:bd:9a:28:e1:59:7a:d2:3c:d1:3a:cf:8d:e3:
                    44:ad:33:28:16:fc:59:65:82:02:1d:fb:62:6d:0a:
                    42:9c:11:09:c9:ad:db:91:a8:db:9f:95:34:ef:3a:
                    c7:45:7b:d7:c3:66:d7:ac:7a:16:5c:a0:3a:35:34:
                    da:67:59:08:8e:41:e0:50:b1:f3:69:b4:e7:7a:ea:
                    2d:38:b9:16:41:48:ae:5d:71:12:6f:31:9e:3b:de:
                    38:53:d5:7f:c1:ac:89:6e:da:6e:dd:08:29:76:ce:
                    e5:72:f3:17:a8:29:91:e9:7f:a6:8e:07:e4:f0:9f:
                    0f:e4:7f:02:b9:36:f5:1f:50:07:47:34:65:0e:e1:
                    ed:93:51:57:6f:40:55:88:ce:34:ee:ad:d7:71:11:
                    15:28:bb:bb:6a:2d:80:d6:ec:54:ea:4f:ea:7a:0c:
                    e7:98:57:f3:5a:bf:85:71:e6:a4:85:2a:a2:6d:4d:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:90:9D:E9:A7:4B:24:2F:3B:5F:4F:AD:9C:22:75:DC:13:72:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6477dab7-7ce8-3b63-b324-b5cb94b05359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:dd80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:06:ae:57:bb:ce:3a:76:78:61:66:38:0b:08:b3:6e:ab:97:
         ca:60:3b:61:53:f4:2e:d4:4f:71:e9:00:c7:5b:c0:38:5d:50:
         a1:74:ee:af:17:b1:64:cd:4d:5a:c7:8d:50:f9:40:ce:f7:f8:
         90:d3:21:2f:cb:a4:f3:50:1d:2a:68:1e:1f:0a:57:e8:2f:ee:
         9c:bb:bb:12:1b:b2:4b:23:1e:0b:79:29:b7:c4:81:63:89:4c:
         49:18:5b:a9:b9:83:89:17:69:d0:9f:c0:44:97:27:a1:30:36:
         0d:88:6f:d3:1d:84:b5:97:4d:8e:30:17:7e:0e:fd:0d:be:3a:
         33:7d:0c:42:1d:b5:b7:8e:2c:e8:59:80:08:b0:c9:46:4f:bd:
         67:b9:ad:18:48:bb:70:bb:e2:47:9c:d4:25:17:96:42:3c:0f:
         fb:45:e6:ca:23:d0:64:39:fa:fe:7d:2f:f6:82:b2:0d:c5:b9:
         78:b8:32:bc:53:f3:a3:a6:4a:6c:a1:3f:ab:dc:81:2b:fc:17:
         64:47:5c:44:19:d1:56:f4:64:bf:8e:07:17:66:f7:ea:76:5e:
         50:e2:5b:90:b5:ae:c5:1c:f4:bb:f0:3a:7b:2b:d5:26:4c:35:
         ca:50:94:25:30:f1:45:89:97:11:c8:d3:57:46:c0:4b:bc:33:
         9a:f2:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:32 2025 by rpki-client