Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa
File:                     e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa (raw, json)
Hash identifier:          0FG1M8rsDh55Jl93CfEM5HVLJDJSKJNnNSFUjrnLqjU=
Subject key identifier:   C2:67:3B:32:BA:AA:F4:5E:A6:63:B4:19:B1:E7:97:4C:13:15:90:69
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B620216266DF3DEBD01230F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:d980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:16:26:6d:f3:de:bd:01:23:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=82ffa7ac-3664-4776-b739-3f2a2a93ffb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b5:a2:f1:0e:40:72:a2:81:6f:0a:b6:ba:d4:
                    93:cd:b8:db:df:98:75:77:9f:06:37:4d:4a:90:55:
                    5f:c9:4d:87:4d:62:35:51:f4:a1:a9:10:5e:dd:13:
                    e3:93:9d:8f:52:e7:f6:ad:3b:92:79:a9:13:05:01:
                    67:89:8b:99:51:d4:ac:a9:77:cc:be:91:2b:7a:10:
                    4f:41:22:cd:0a:56:de:20:b1:ea:6c:1a:ef:93:bd:
                    7d:55:aa:cd:08:5e:37:b0:89:51:7b:56:80:5b:ec:
                    1a:a1:13:46:86:1f:c8:53:b1:be:a8:99:17:b5:0e:
                    72:be:b2:cd:68:25:8d:7c:10:7b:0e:f3:a0:5e:c8:
                    09:2a:66:d0:e6:fc:03:b3:0b:c2:01:3e:cb:73:ef:
                    6a:2c:53:04:7f:19:ca:6f:0a:f3:47:f9:b3:e4:00:
                    fe:5e:98:4b:34:ed:47:25:56:c5:0b:c2:03:6c:31:
                    f0:36:72:76:43:bc:ed:96:a8:1a:10:8d:02:65:1b:
                    45:28:7c:4b:35:23:84:77:96:4a:ed:07:1c:ec:ba:
                    f1:72:15:51:e6:93:3e:4e:81:39:44:1d:14:f9:8f:
                    d0:e3:dc:1e:5b:65:84:e2:95:fa:3b:47:03:ad:b7:
                    4f:0f:59:b9:b6:fd:c6:13:58:7a:38:61:8e:d7:ba:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:67:3B:32:BA:AA:F4:5E:A6:63:B4:19:B1:E7:97:4C:13:15:90:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e91fd045-9970-3cd7-b680-ad66b3a2d3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:dd:31:33:de:c5:89:be:be:7e:67:8e:6e:c2:69:4a:dc:
         1d:bf:9a:95:fa:f8:b6:26:f1:c6:a8:bc:20:c1:b5:e3:81:47:
         eb:4e:80:ec:11:0f:b7:55:d0:44:a1:d8:7c:a8:ad:53:b6:af:
         25:7f:9f:c8:e6:70:63:3f:73:84:29:c6:7f:b7:7c:bf:65:2d:
         03:c3:80:9b:71:05:80:fd:c4:31:19:63:99:f2:ed:c4:84:d1:
         7a:f9:08:42:a7:da:4f:68:1d:72:05:d5:17:11:7c:bc:38:cb:
         05:88:25:20:7b:1d:bc:38:ad:91:97:cd:aa:7d:cd:a0:ab:a0:
         8b:90:7a:ff:b8:09:9a:64:8f:e9:0d:73:45:90:ee:29:ea:bb:
         43:5f:89:70:a1:8d:98:42:5d:d4:b5:38:d9:61:f5:0f:53:09:
         eb:95:ec:25:7b:0a:80:f3:2f:05:f4:11:6e:89:5c:ce:37:e6:
         02:64:9a:72:fe:0c:49:23:5a:69:71:5d:28:02:a4:14:b6:49:
         ac:67:b0:b1:3f:b2:24:83:c6:3b:63:1f:e3:e3:d4:3b:67:6c:
         be:aa:19:4b:29:ba:9d:f0:71:63:fd:cb:b2:c8:4e:fd:e1:45:
         70:96:29:6c:35:78:54:ec:72:f0:1f:4b:6d:97:2c:23:ff:94:
         cd:ce:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:57 2025 by rpki-client