Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
File:                     a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa (raw, json)
Hash identifier:          eCF7i0PnluRl31OR55FtluXTqodneRPPgGnL2bsfEXs=
Subject key identifier:   BE:C3:EC:31:5E:B0:41:FD:70:14:61:48:27:6F:4D:22:33:41:DB:57
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D74983891468484BFBA6A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:2780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:49:83:89:14:68:48:4b:fb:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=baea5658-6c5f-4357-a81e-51ffb42e769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:13:1e:fb:47:47:44:18:2f:2c:23:8d:88:
                    5f:b8:50:9c:99:9c:61:e5:f9:d5:21:00:27:df:47:
                    cf:d0:79:3f:cd:9e:ba:85:29:76:e2:77:54:09:e3:
                    a3:97:2b:3a:60:20:47:6d:86:93:af:d8:ad:57:1f:
                    96:36:54:d1:3a:30:37:9c:a1:1e:f8:46:fe:e9:e2:
                    18:75:e9:45:69:23:cc:af:47:d7:31:b6:21:e2:7e:
                    a5:cb:85:1e:e3:6e:c3:71:f5:f3:03:e7:75:14:76:
                    0d:8f:5f:31:66:0b:14:0e:64:df:8e:91:49:5f:76:
                    6d:b4:4d:53:9d:a3:6e:e6:38:e6:ca:6a:55:6b:41:
                    69:fc:4d:9a:fd:b0:c9:b5:2f:67:6a:12:89:71:da:
                    a3:0e:a9:fb:e5:7b:e8:ef:5c:ca:69:ba:d0:77:63:
                    6f:1b:25:a0:c4:e9:06:f6:39:5d:fc:f2:10:79:7a:
                    3b:63:df:68:32:e1:47:c8:b3:6c:6f:22:5d:95:7b:
                    2d:2d:19:a3:9c:8f:8c:f4:4d:24:89:8b:1e:07:db:
                    c0:32:0f:fa:81:89:04:ec:0b:92:bc:84:ba:21:49:
                    39:a0:a3:83:6f:17:f1:31:30:32:36:1c:7b:19:fc:
                    ee:ec:8f:2f:90:82:07:62:95:de:e5:58:ff:16:ee:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:EC:31:5E:B0:41:FD:70:14:61:48:27:6F:4D:22:33:41:DB:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:a9:39:b2:fc:90:b4:ef:a6:30:59:8d:82:5d:fb:f2:93:
         6b:54:15:84:fc:30:ed:57:f8:9a:b2:07:9f:15:ab:98:df:1e:
         28:81:80:48:14:9e:21:e0:a4:e0:7f:8c:52:a2:5d:a2:47:3e:
         0d:1a:69:ec:87:00:6f:c5:35:c7:e1:d3:d5:d8:5b:0f:d6:44:
         10:8f:58:98:b8:21:44:9c:4e:e5:7f:dc:81:b3:7d:1a:c5:d8:
         b5:a5:87:8c:3a:53:2d:76:8b:79:4f:0b:b9:cd:b1:c0:e8:e0:
         7c:29:47:8f:9c:2e:49:4f:33:46:98:d0:14:64:4e:a5:c1:38:
         8c:bf:36:a1:2e:9f:28:6e:dc:12:a2:26:c8:fe:b1:47:60:5f:
         d6:86:b7:04:b6:cc:f5:4e:a9:9d:08:2d:04:9d:d1:64:1e:ff:
         3f:2a:9e:12:79:42:d2:2a:bc:ee:30:eb:4e:72:29:04:69:8b:
         46:1f:cc:ff:69:2d:ea:8e:89:00:8c:c4:86:29:48:ed:24:e9:
         b5:bb:a7:41:30:b1:b6:4f:26:5a:93:bd:5e:b2:23:88:fe:3a:
         1b:6e:4c:b0:ec:dc:48:bc:bb:c1:24:f0:fa:9f:c3:dc:a8:b4:
         3a:32:ff:ad:cf:9e:0d:c1:4d:91:dd:fc:56:ed:8a:11:62:53:
         ba:f1:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:03 2025 by rpki-client