Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa
File:                     e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa (raw, json)
Hash identifier:          wBatSB2sGZSLRg2C9RMsOwQFmUfhO+aINHukWeMCyrY=
Subject key identifier:   DB:A6:F8:15:E8:5C:8C:52:76:CC:83:6B:7D:23:4B:53:6A:BC:C5:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4C048D2B104665D08411
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:2c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4c:04:8d:2b:10:46:65:d0:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7c0ca9cd-3e0a-4e4b-ad97-7025bc4a4043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:ce:9b:72:f1:39:5f:d9:59:41:e1:8d:47:
                    be:de:32:5c:32:ed:6d:08:f0:09:fc:da:f4:0e:3a:
                    5d:1d:b7:ea:20:3b:16:1c:09:af:3e:7d:9a:2b:b4:
                    7d:fe:37:79:76:10:88:09:93:36:0c:29:90:47:89:
                    71:37:dc:54:73:4e:56:a6:3f:ef:4b:7f:bd:b6:7c:
                    e4:f3:1e:50:70:4f:e0:55:f3:fe:1f:8e:84:d8:ce:
                    26:e4:55:6c:4c:02:1d:56:cb:4c:4e:79:8b:9d:95:
                    0f:bf:dc:ef:8c:36:12:ee:61:73:19:c6:65:c5:9c:
                    17:78:52:f2:af:9b:39:6a:e4:59:05:25:2b:70:11:
                    c1:ef:19:f5:bd:ac:34:40:20:73:05:af:fd:ae:d2:
                    b5:cf:b2:f5:cd:9d:8a:46:6e:ec:2c:96:28:42:53:
                    44:23:c0:15:97:cd:b9:b2:f5:15:dd:4c:43:ad:78:
                    3c:b6:06:8d:f5:62:ee:03:2a:7f:64:94:ee:4a:46:
                    44:3e:86:3d:6a:18:c5:b7:f8:8e:37:a3:27:20:98:
                    77:8e:c7:b8:8b:7d:71:dc:8f:8c:90:38:96:92:b9:
                    31:e3:3d:a0:4f:cc:81:e8:87:bd:89:b5:cd:be:a6:
                    ba:32:b6:81:d6:9a:91:4c:31:f1:31:f4:ea:5e:d4:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:F8:15:E8:5C:8C:52:76:CC:83:6B:7D:23:4B:53:6A:BC:C5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:19:9a:e5:1b:ab:68:d1:5a:63:cb:0f:7b:45:a8:e4:a5:
         16:34:e8:40:0e:87:d8:20:86:9a:6b:7c:98:60:54:fb:08:bc:
         77:ad:70:9c:b1:8f:09:e0:30:99:d3:c1:3c:42:fd:64:cd:2a:
         3a:fe:b5:8c:22:fb:8c:44:ff:22:ab:03:d8:6d:6b:9e:68:bd:
         a6:6f:47:2e:98:7e:ff:3b:ac:88:28:79:a5:6f:e6:1e:09:c3:
         74:df:b3:d6:ee:fd:a9:ba:fd:35:fe:0b:d6:17:04:52:0a:f9:
         8d:b4:5b:92:a8:8e:88:e7:71:23:01:73:8f:9c:43:ae:7c:0a:
         e0:05:28:e6:05:fc:c3:8d:ae:cb:5f:93:b7:d5:78:07:06:29:
         b2:f7:c0:08:85:03:65:0a:20:c8:ba:60:1d:d1:3f:74:96:a3:
         29:41:33:8c:40:35:b0:f1:6f:11:36:61:58:56:28:fb:fd:9e:
         b0:e4:af:46:cd:b5:cb:b2:ab:0f:d5:ed:42:22:a6:ff:c4:b2:
         6a:21:a1:50:b5:77:41:97:0b:5d:7b:07:fc:9e:60:69:0f:18:
         cc:f7:71:04:77:80:34:b6:7b:5f:8b:29:ad:11:56:d7:70:5e:
         66:98:c3:a2:41:86:a8:db:49:47:25:3e:5e:e6:0d:37:c3:ee:
         43:4c:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:25 2025 by rpki-client