Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4380536-1815-33ab-9a35-73bb51f6cee2.roa
File:                     a4380536-1815-33ab-9a35-73bb51f6cee2.roa (raw, json)
Hash identifier:          qqBTE/oCZmu6/ecYA2zXhnRszdjbeW4guGlPG7Jrbe4=
Subject key identifier:   83:71:CA:2F:45:C3:48:DC:B1:18:8D:6B:AB:FE:92:A6:B5:6B:C5:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62021F98C69BDB60AFD6B980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4380536-1815-33ab-9a35-73bb51f6cee2.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:4080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1f:98:c6:9b:db:60:af:d6:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=e93c33b8-63ad-4422-9675-c9a2d447a8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:97:4c:db:c7:39:89:46:62:0c:c0:9d:c9:
                    96:ba:94:cd:14:21:b7:1b:d0:1d:ac:4e:54:5f:16:
                    6b:25:38:37:cb:6b:d0:ab:3d:1b:01:fc:b4:1d:cc:
                    eb:28:91:ff:27:ba:63:59:d3:0d:ae:4b:ed:5b:e4:
                    bc:e9:6d:c1:cf:2c:e3:02:2f:a8:dd:c3:68:0c:69:
                    87:cb:a1:3f:60:22:0e:57:d3:60:29:e3:53:f7:45:
                    0a:6d:32:0e:52:f0:f4:5d:94:9c:75:6f:2a:cc:06:
                    db:67:01:49:4e:22:56:d6:70:e5:61:7b:f8:2a:d7:
                    18:64:a6:79:af:6c:6c:6a:4b:c1:8b:02:d2:2d:75:
                    9b:a3:05:73:14:6d:21:7d:39:96:6a:d3:47:85:a6:
                    50:7a:3b:78:97:aa:72:74:46:cc:a7:07:6e:50:20:
                    05:63:b0:84:b1:f8:9b:91:da:5f:42:28:c0:ae:e6:
                    63:29:09:be:4e:70:5c:5b:6a:e1:fd:f6:6c:a6:23:
                    43:5d:64:92:86:46:0e:cc:73:f3:47:7f:c0:8e:23:
                    a4:cf:f6:bc:51:e5:20:fd:30:4b:c5:3e:ae:78:61:
                    e6:67:05:86:2e:77:07:37:9e:84:87:47:ea:19:3b:
                    af:91:25:ad:61:ee:d6:43:3a:ed:5c:d9:66:e0:bf:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:CA:2F:45:C3:48:DC:B1:18:8D:6B:AB:FE:92:A6:B5:6B:C5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4380536-1815-33ab-9a35-73bb51f6cee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:e2:ad:12:5d:59:26:5a:ff:f0:32:6c:c4:05:54:d0:90:
         d8:a3:d0:e3:44:7c:2b:0d:3a:3d:18:f7:11:20:31:94:99:19:
         5f:3a:24:24:46:fb:b4:4d:81:55:80:ed:0d:3f:47:9c:92:b2:
         5c:89:2f:17:64:aa:40:d6:cf:eb:fe:05:6c:48:a4:47:20:53:
         19:cc:53:f3:60:08:ec:47:95:2b:67:c4:b9:08:e7:6e:37:4f:
         86:41:1c:15:64:18:e8:93:f9:73:c9:96:a8:62:55:f6:6a:66:
         75:75:c7:0f:8b:ec:50:f1:99:ae:63:5d:15:aa:6a:80:7e:cc:
         c1:1a:3c:8c:a9:cf:fc:13:f7:48:79:ea:f7:37:52:08:30:4a:
         a5:33:8d:cd:b8:a2:12:a9:7c:f5:c0:79:32:4b:41:12:23:37:
         1b:0c:6d:8f:d8:8f:e1:6e:60:1c:f0:26:27:08:16:76:c9:0c:
         fa:0a:8f:73:3d:9f:97:12:6f:2d:c6:d2:1a:b4:c1:61:41:b2:
         42:15:74:3c:1e:ab:77:e8:66:25:ad:bc:87:a6:61:fe:9d:82:
         eb:8b:c2:1e:08:c0:4f:05:59:c5:80:bf:10:93:a2:1a:39:c2:
         50:22:35:a0:17:57:c7:5f:fc:f8:c1:22:4d:96:1c:14:7e:ff:
         7f:d3:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:17 2025 by rpki-client