Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa
File:                     f4d88561-6aa1-3cfc-8444-84896c71d01a.roa (raw, json)
Hash identifier:          J8yPn5ET/xXsxJ87A09pzIOu0VmvIfbQNZAjpJPa/Ps=
Subject key identifier:   F4:53:E3:B4:69:F3:08:A9:9F:CE:2B:11:62:ED:59:38:4B:C8:35:3D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62022A5EF2638B804178AB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:f400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2a:5e:f2:63:8b:80:41:78:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=9532f868-0372-407d-a175-7b3bee9b1298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:07:42:ea:f7:55:88:16:f8:a8:c3:37:13:
                    00:95:26:8c:63:bf:07:3c:d9:75:97:67:37:88:09:
                    a1:26:29:c8:67:2f:bd:12:7f:9e:72:29:56:87:71:
                    af:37:3d:dd:71:47:6e:56:cb:4a:56:9b:df:9a:52:
                    60:47:01:65:e3:3a:d8:ed:6d:0b:e5:91:cc:fc:6c:
                    1c:76:e6:9f:4b:14:ca:72:6c:11:2b:16:00:5c:b5:
                    69:b3:3f:db:1a:1c:c0:e7:5c:9e:c0:a1:ee:dc:88:
                    d7:ae:a2:30:96:09:ce:0d:17:e5:bd:09:41:4f:03:
                    d3:6b:b7:d8:2f:fc:6d:4c:a5:ee:0f:1e:5f:e6:bd:
                    fa:ef:66:be:41:3f:e1:50:b5:b4:ab:80:55:de:0e:
                    ad:7a:ae:5b:dc:b1:5f:06:91:80:af:b9:df:14:7c:
                    a7:95:66:9a:78:a5:8b:3f:09:72:85:5d:3c:c6:9e:
                    39:b3:72:44:22:6b:fb:0e:98:53:2e:fc:de:6e:3d:
                    7f:99:c2:7a:76:47:06:01:b8:03:3a:f8:4c:99:0b:
                    f0:4b:77:ac:ea:c6:18:f6:05:e7:2c:ef:30:08:6d:
                    ee:53:77:02:26:72:b7:ab:02:00:a9:58:7b:ea:40:
                    a9:30:bb:53:0b:f6:7d:42:70:db:c5:72:3b:5a:48:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:E3:B4:69:F3:08:A9:9F:CE:2B:11:62:ED:59:38:4B:C8:35:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:e9:73:ed:4f:a6:95:6d:2e:67:24:08:24:c1:d1:2b:d8:
         ac:77:f9:b9:fd:09:9d:31:25:11:d7:fa:3a:a8:58:74:8f:6d:
         ef:c4:5e:6b:51:4d:08:27:71:a7:0d:38:04:98:28:67:4b:dd:
         5d:46:ad:b5:57:ec:14:6e:46:71:9f:e7:5b:48:fc:76:84:a0:
         fc:5b:f6:0e:35:75:77:c4:1d:3f:14:85:7a:cf:fa:1c:11:f8:
         ae:9e:bf:ab:bb:89:96:21:ae:18:f1:80:0e:83:29:1d:2c:6d:
         b7:1e:f5:93:04:69:c8:86:d6:f6:91:62:ef:89:5b:b5:06:98:
         d5:94:f8:22:18:40:24:5d:2c:d9:f2:43:bd:33:5f:4b:3d:8c:
         9d:5e:af:f1:55:44:35:56:ba:61:06:64:7f:8d:16:e2:e2:6c:
         6d:52:f4:ae:33:44:c7:17:f3:e7:75:db:c8:82:91:96:70:d4:
         c6:97:47:1d:cf:c6:11:76:b8:ec:aa:19:45:d9:e0:b6:cc:96:
         cc:b7:73:13:13:28:0a:cb:f5:53:b4:c5:a8:89:1a:b1:da:95:
         44:58:7d:ec:64:ab:9e:a5:40:d4:d2:7a:92:67:eb:c7:df:7b:
         65:1d:f5:01:32:2b:e1:4c:ce:7e:76:bb:8c:b6:2a:92:69:5a:
         a4:e5:d7:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAipe8mOLgEF4q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
OTUzMmY4NjgtMDM3Mi00MDdkLWExNzUtN2IzYmVlOWIxMjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndsHQur3VYgW+KjDNxMAlSaMY78HPNl1l2c3
iAmhJinIZy+9En+ecilWh3GvNz3dcUduVstKVpvfmlJgRwFl4zrY7W0L5ZHM/Gwc
duafSxTKcmwRKxYAXLVpsz/bGhzA51yewKHu3IjXrqIwlgnODRflvQlBTwPTa7fY
L/xtTKXuDx5f5r3672a+QT/hULW0q4BV3g6teq5b3LFfBpGAr7nfFHynlWaaeKWL
PwlyhV08xp45s3JEImv7DphTLvzebj1/mcJ6dkcGAbgDOvhMmQvwS3es6sYY9gXn
LO8wCG3uU3cCJnK3qwIAqVh76kCpMLtTC/Z9QnDbxXI7Wkg7gwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPRT47Rp8wipn84rEWLtWThLyDU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjRkODg1NjEtNmFhMS0z
Y2ZjLTg0NDQtODQ4OTZjNzFkMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDo6XPtT6aVbS5nJAgkwdEr2Kx3+bn9CZ0xJRHX+jqoWHSPbe/E
XmtRTQgncacNOASYKGdL3V1GrbVX7BRuRnGf51tI/HaEoPxb9g41dXfEHT8UhXrP
+hwR+K6ev6u7iZYhrhjxgA6DKR0sbbce9ZMEaciG1vaRYu+JW7UGmNWU+CIYQCRd
LNnyQ70zX0s9jJ1er/FVRDVWumEGZH+NFuLibG1S9K4zRMcX8+d128iCkZZw1MaX
Rx3PxhF2uOyqGUXZ4LbMlsy3cxMTKArL9VO0xaiJGrHalURYfexkq56lQNTSepJn
68ffe2Ud9QEyK+FMzn52u4y2KpJpWqTl1wQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:22 2025 by rpki-client