Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa
File:                     b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa (raw, json)
Hash identifier:          b00ysLjEO5MN5n6YSUI7rOp9+POXcaLGGuwC7sPca88=
Subject key identifier:   D7:E8:77:5C:E8:51:43:66:6F:14:59:A1:D3:92:8C:84:4B:84:98:26
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6202379861049F01A7283800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:2e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:37:98:61:04:9f:01:a7:28:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6bfce59e-9464-429e-aad9-abcc048c52ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:56:fb:1c:a6:78:7f:61:0f:4f:30:59:c6:
                    e3:08:68:a1:60:a6:ec:8c:87:a9:78:b9:a0:10:a1:
                    ce:d1:e0:04:7a:2a:b3:6e:ef:c7:2c:1b:09:20:f0:
                    59:0a:ab:54:75:46:6f:76:53:05:f9:74:53:81:41:
                    b9:32:06:27:c4:d2:78:cf:e7:25:c1:3d:85:a7:b2:
                    1a:dd:44:dd:c7:50:dc:c1:eb:80:a7:79:be:0c:6f:
                    1d:9b:7a:af:e1:40:b2:58:62:a0:35:fa:48:55:0b:
                    50:5a:bd:54:c1:1a:af:0f:27:32:9f:67:e9:b3:c2:
                    b5:de:23:d8:29:f1:86:2c:4a:1f:b7:9a:5c:47:19:
                    15:1c:91:37:6f:2a:d1:01:2f:90:ab:df:1b:31:aa:
                    bd:7e:37:92:9f:14:f6:53:68:c1:19:04:c3:14:3f:
                    75:72:76:94:96:32:a7:c6:9a:b0:a2:12:4e:6e:6b:
                    94:c0:2d:66:44:79:cc:7b:6d:28:81:d6:94:05:3b:
                    f5:09:a3:ee:e3:59:0b:10:07:f1:b7:36:52:52:ab:
                    c3:07:ec:68:a9:fe:ae:83:8b:e5:84:77:da:a9:5a:
                    30:2d:63:19:8a:a9:f8:e9:16:08:72:b0:a6:99:4a:
                    68:ef:97:69:15:12:47:df:b7:d8:df:1b:c8:4a:4f:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:77:5C:E8:51:43:66:6F:14:59:A1:D3:92:8C:84:4B:84:98:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:53:e4:4b:ce:37:86:f2:a3:60:26:10:65:7a:2c:eb:f7:e8:
         f6:d7:a4:f4:b8:23:04:c7:35:1a:f4:27:88:9a:d2:5b:dd:75:
         a9:1c:ec:97:67:12:e7:84:80:b5:70:91:98:84:89:ec:4c:de:
         e2:4b:ee:24:1b:8e:61:1e:57:00:7b:59:64:8c:56:2f:c1:9e:
         16:87:9a:f0:42:13:23:68:fb:14:03:a0:4f:1a:72:b3:0f:ff:
         3e:c7:b5:0a:e3:81:a3:f9:da:80:1f:db:0c:c7:eb:01:d7:6d:
         02:cb:57:94:8f:0a:e3:56:c6:c0:d5:c5:cb:87:03:23:53:a8:
         23:c2:c5:8b:91:18:1f:ac:4c:0e:59:3e:dc:4b:c8:45:e3:fa:
         bb:8e:10:5d:e1:e5:8a:44:4e:22:d3:c8:1b:fe:0f:08:c9:10:
         b6:d6:33:0f:ee:c6:69:27:b4:3e:92:dc:da:e9:8e:e2:d6:7b:
         ce:3c:f5:9d:32:df:8c:b1:2e:fe:55:91:46:19:6d:83:94:27:
         18:f4:0a:76:b4:92:c1:cf:24:85:92:12:81:43:f6:8a:73:85:
         56:c3:14:01:bc:80:2a:09:91:68:7e:dc:d6:25:c7:33:f3:2e:
         c4:dd:f5:08:5f:02:46:67:ba:70:f3:e2:52:2b:a0:72:7a:ae:
         31:fa:28:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjeYYQSfAacoOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NmJmY2U1OWUtOTQ2NC00MjllLWFhZDktYWJjYzA0OGM1MmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VpW+xymeH9hD08wWcbjCGihYKbsjIepeLmg
EKHO0eAEeiqzbu/HLBsJIPBZCqtUdUZvdlMF+XRTgUG5MgYnxNJ4z+clwT2Fp7Ia
3UTdx1DcweuAp3m+DG8dm3qv4UCyWGKgNfpIVQtQWr1UwRqvDycyn2fps8K13iPY
KfGGLEoft5pcRxkVHJE3byrRAS+Qq98bMaq9fjeSnxT2U2jBGQTDFD91cnaUljKn
xpqwohJObmuUwC1mRHnMe20ogdaUBTv1CaPu41kLEAfxtzZSUqvDB+xoqf6ug4vl
hHfaqVowLWMZiqn46RYIcrCmmUpo75dpFRJH37fY3xvISk80wQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNfod1zoUUNmbxRZodOSjIRLhJgmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjFhNzZkMTktNzdmNy0z
YzdjLWJiYjEtYjIxN2NjZGMxOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgC6A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADBT5EvON4byo2AmEGV6LOv36PbXpPS4IwTHNRr0J4ia0lvddakc
7JdnEueEgLVwkZiEiexM3uJL7iQbjmEeVwB7WWSMVi/BnhaHmvBCEyNo+xQDoE8a
crMP/z7HtQrjgaP52oAf2wzH6wHXbQLLV5SPCuNWxsDVxcuHAyNTqCPCxYuRGB+s
TA5ZPtxLyEXj+ruOEF3h5YpETiLTyBv+DwjJELbWMw/uxmkntD6S3NrpjuLWe848
9Z0y34yxLv5VkUYZbYOUJxj0Cna0ksHPJIWSEoFD9opzhVbDFAG8gCoJkWh+3NYl
xzPzLsTd9QhfAkZnunDz4lIroHJ6rjH6KFU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:49 2025 by rpki-client