Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
File:                     7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa (raw, json)
Hash identifier:          aPywa5YkOLirJ5Q8+bEFYZwwc+P6RF4zPYCMuZPjVdU=
Subject key identifier:   58:D4:C4:C8:AE:9A:75:7C:84:E2:AE:8E:8F:23:64:3E:2C:8F:C5:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5C6C6EAB70800804AF9E78E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2d80:d900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:6e:ab:70:80:08:04:af:9e:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=37abbe02-a35b-4742-adae-2450b9707d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:01:12:60:68:c3:8c:ed:91:e7:93:c2:5a:
                    90:48:19:de:e3:14:66:11:da:fc:e0:39:a3:13:a2:
                    64:10:8a:eb:57:69:df:2b:e4:b3:97:29:25:34:20:
                    f8:f2:26:49:ea:06:8d:27:cf:b0:9c:b0:c0:5b:29:
                    ab:10:c2:3d:bd:3d:21:90:99:f9:c6:a6:fb:ae:64:
                    14:97:b3:cf:4c:58:ad:53:d5:f2:cc:a2:74:d8:13:
                    9a:5b:d5:30:b6:5c:fd:76:24:3f:19:4e:f4:6c:43:
                    32:d9:d7:cf:4e:d9:30:b9:9a:0c:3c:ff:f7:c2:67:
                    53:09:a3:09:9c:f6:5e:97:df:50:93:76:74:7c:7b:
                    b6:32:cd:00:ce:fc:16:d9:39:15:39:4a:73:97:59:
                    c9:ae:c0:e1:73:14:51:0f:79:59:70:f0:81:29:16:
                    31:80:77:c7:12:8e:49:2f:1d:ba:0f:b7:22:18:aa:
                    81:3a:e6:ef:24:cf:8a:0f:db:4f:a5:38:43:2d:d0:
                    f5:89:e6:31:a5:19:06:3d:ff:5a:65:20:7e:5c:e1:
                    c0:78:05:1e:27:30:11:e2:d4:b3:3d:34:0e:d3:3f:
                    fd:e6:68:43:fe:f0:83:09:61:fe:74:87:0e:22:3d:
                    d8:70:1a:5c:16:3a:eb:a6:26:9c:04:ee:e9:52:5a:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D4:C4:C8:AE:9A:75:7C:84:E2:AE:8E:8F:23:64:3E:2C:8F:C5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:85:69:45:0a:59:4a:c6:98:c3:78:e5:e2:97:76:38:21:de:
         33:31:ff:db:f9:58:73:02:df:36:3f:33:6f:74:6e:7f:67:71:
         49:4f:d0:0b:8a:22:a3:95:1c:06:ca:5f:62:e7:21:d3:dd:b8:
         77:53:02:e9:48:fe:a7:44:2f:38:83:03:7c:2c:2f:24:2e:7b:
         f9:a7:4a:13:e4:4f:18:59:f4:c3:d3:70:fb:12:30:5f:24:fe:
         b0:7a:f2:d4:57:41:4e:9e:b2:c3:e2:f0:10:c9:aa:3a:8d:14:
         f5:5c:e2:ee:11:7c:da:72:15:01:3a:64:51:0f:6d:9e:12:21:
         13:74:46:6f:a5:89:d5:9b:97:c2:be:df:f1:62:ca:6a:11:56:
         7a:be:9f:a5:ae:4e:f3:e9:05:f9:cf:9c:48:08:4b:2f:56:24:
         57:b7:f3:e3:e2:7a:31:64:ed:8d:b7:17:8f:1d:e2:33:15:3d:
         1f:9a:05:39:16:52:2b:78:17:30:81:fd:80:f5:d9:48:04:4a:
         92:65:b6:1c:3a:4d:cd:9d:bd:34:94:d3:73:11:af:20:60:88:
         7d:47:b0:98:63:96:ad:64:f1:94:df:20:c0:84:d3:37:f6:0c:
         d8:87:6e:02:45:df:6b:ad:d9:e5:79:39:b3:21:9f:d1:de:4f:
         21:7b:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:47 2025 by rpki-client