Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa
File:                     f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa (raw, json)
Hash identifier:          whI9jtl18Fj3P8qVot77omL0qzpTZQYinjoaeFax3ZY=
Subject key identifier:   88:E9:3C:FC:F0:1F:7A:C2:5E:C1:2F:29:76:BA:01:00:1A:82:22:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62021FA75E959ACC213AF690
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1f:a7:5e:95:9a:cc:21:3a:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=2fb54b6d-aaef-48cd-a244-0f2bb8547443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:6c:46:3d:2c:4a:d2:95:88:64:9d:01:a4:
                    e8:d5:ea:5f:72:2d:db:94:85:a2:11:25:a0:3d:0c:
                    c3:6c:25:4b:c0:9f:7d:15:a7:86:3c:2a:fd:29:14:
                    73:ca:60:04:4d:bc:59:e2:b4:19:8e:06:f3:f3:7e:
                    2a:ac:9c:09:d5:18:5c:ca:a9:03:53:19:3a:7b:1e:
                    b6:60:47:c0:40:18:ed:83:54:e2:67:b2:52:43:00:
                    e5:22:ae:85:b5:90:9b:c9:51:d5:16:52:ba:69:fa:
                    97:73:1f:0a:39:6b:58:41:17:02:ea:f9:0c:f7:d3:
                    72:1c:57:14:d6:05:2d:63:29:aa:89:2d:cf:c0:7c:
                    a7:a7:19:7b:dd:aa:af:de:8f:ee:a4:39:b4:d3:ff:
                    5f:46:d6:97:b6:a7:52:03:15:23:b0:ea:f8:9f:c7:
                    86:60:e6:a2:83:99:72:e9:56:e8:17:dc:b2:28:c7:
                    c9:93:46:74:c1:de:18:c7:d0:02:8f:7c:b4:98:38:
                    26:08:b9:27:f0:d4:e1:1d:a0:32:0b:08:98:5b:bf:
                    2b:e2:8d:90:26:62:a1:7a:62:84:24:18:37:99:4f:
                    0c:46:9a:7f:cc:e3:f0:d6:06:52:14:23:79:e6:de:
                    22:dd:a9:4d:ee:91:d8:78:4e:d6:5c:c9:32:a2:88:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E9:3C:FC:F0:1F:7A:C2:5E:C1:2F:29:76:BA:01:00:1A:82:22:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f864d66f-a1b9-3f8c-a9af-44b4ee8519ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:9d:7f:57:d0:67:27:11:98:9f:3e:f5:6b:f7:94:de:99:
         d0:6a:93:30:0e:23:81:42:2f:c8:6f:d9:9e:ca:61:97:8e:d2:
         07:16:55:32:7a:1f:0e:1f:0a:42:cb:e4:17:c4:6b:6e:ac:98:
         26:ad:99:ff:b4:cd:57:f4:0a:f5:4a:cd:74:7f:4a:1d:53:24:
         36:f4:a6:9f:71:b2:d1:ff:b4:9f:b5:0a:a1:de:90:4c:0a:63:
         8f:fe:e2:4f:02:2c:70:9c:2a:09:5e:c8:a0:8f:fe:81:71:46:
         47:2a:f1:ca:35:3f:a0:88:e3:af:46:2a:cc:5f:d7:07:45:6a:
         ae:89:8f:c1:cc:3e:6a:29:06:67:f8:ea:ca:e0:0e:31:95:ec:
         d2:df:83:45:fb:2f:ce:17:a7:0b:18:c2:39:5c:09:6c:bf:f7:
         d1:c4:2f:4d:a5:03:ba:9d:f5:eb:a9:36:5b:2e:68:cb:a1:46:
         55:0f:e0:b9:37:ed:58:8a:50:b6:18:56:c9:ca:88:b9:98:15:
         b8:cc:47:d7:72:1c:ba:e3:ed:ba:10:30:21:c9:3e:72:7c:04:
         aa:56:45:cc:2f:d7:78:82:d0:54:10:ea:6f:3c:1d:80:3a:30:
         e0:ff:26:c1:a8:07:33:65:02:ce:b9:c8:88:55:ed:af:f7:aa:
         c7:ed:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:46:00 2025 by rpki-client