Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa
File:                     0013c481-b1c3-3f22-ac9e-7711e14fd828.roa (raw, json)
Hash identifier:          6ZEXSw0cKc1K1Bp50tWpMOCUAPKkXzHrvt2SXCZcBKM=
Subject key identifier:   B6:46:0E:0F:87:16:E4:58:2E:45:62:AF:4E:78:78:67:50:EC:51:BD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A5B95ABCC0A70370E2F8E8500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     19905
IP address blocks:        2604:2d80:3380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ab:cc:0a:70:37:0e:2f:8e:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=a2f9a2eb-3ad7-4f15-8591-fa9020d0876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:36:a0:59:37:cf:ec:a5:a3:ab:35:2b:84:
                    fa:31:24:62:a9:b5:79:26:0b:4b:0a:d1:3f:db:f6:
                    c5:1c:9b:f7:60:53:b7:3b:20:fe:4b:33:6c:1c:f6:
                    e7:10:cf:a1:9f:25:26:9e:05:63:14:b3:81:54:51:
                    61:ad:7e:ac:c7:48:fc:9b:e2:59:08:b2:d9:13:95:
                    4f:1c:10:02:30:2e:fd:c3:e6:37:e6:11:31:29:b7:
                    ea:ba:f7:b5:7d:58:7c:96:38:70:cc:1e:a4:3f:4f:
                    22:5a:b6:87:40:2f:b5:00:5c:4f:48:24:74:59:75:
                    fa:5c:10:34:2a:6e:63:99:37:3b:de:63:f8:27:96:
                    fb:e3:87:51:4b:dc:49:fb:51:ee:9e:53:e6:00:f4:
                    9a:00:c1:80:4b:1b:67:50:91:59:68:75:ad:04:ac:
                    37:42:81:fa:e8:78:c8:f0:ba:4b:21:c3:7d:13:18:
                    dd:c8:93:7b:a2:22:04:03:ac:84:95:32:54:2b:ee:
                    f7:39:97:7e:a6:49:6f:7c:c0:19:66:e6:21:e3:2d:
                    99:5a:20:19:cd:31:0d:85:20:f2:0a:7a:67:b3:e4:
                    66:28:df:d7:af:ea:e0:6c:f4:c6:97:c2:d1:75:da:
                    15:4e:68:b2:4d:3f:15:ec:7d:f5:15:40:eb:08:8b:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:0E:0F:87:16:E4:58:2E:45:62:AF:4E:78:78:67:50:EC:51:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0013c481-b1c3-3f22-ac9e-7711e14fd828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:02:93:d9:3c:91:82:28:7c:52:f0:d2:d3:14:5c:5b:24:
         98:19:15:42:c3:77:67:07:48:b9:b9:53:e6:b0:65:4f:d0:25:
         5a:90:9d:41:dd:96:d2:ec:1d:e1:17:37:71:f0:23:b8:5c:0b:
         ee:68:ef:83:fe:a7:9e:88:2b:b8:8e:76:a7:08:05:61:92:df:
         30:b2:a8:e4:67:d3:83:78:7a:9f:e7:56:04:90:4c:10:63:c7:
         78:6f:e4:cf:41:81:17:06:2f:cb:5d:48:05:59:0b:ba:3d:8c:
         a6:d9:90:e2:d3:76:53:60:95:83:61:3c:b0:9a:a4:43:c4:87:
         6f:02:c9:fc:c9:c9:a2:4e:fb:44:24:04:e2:5e:a9:a1:c6:91:
         fa:68:b9:9e:0c:d2:7b:c7:f0:7b:dd:d2:28:35:99:49:c0:82:
         cd:de:9b:b1:e6:b9:0c:2d:37:48:63:b7:28:1e:6a:70:78:88:
         ba:b2:a1:52:76:09:c1:44:2b:dd:3b:60:d6:c4:9d:d3:98:68:
         c6:07:70:df:58:03:76:fb:88:5f:9e:12:91:f1:45:26:41:3c:
         df:79:20:8c:38:2a:86:a9:fa:80:43:67:08:a7:4f:fa:b0:35:
         37:6d:17:ed:e9:c0:51:21:47:f3:24:32:25:90:9d:a2:b1:b3:
         c8:7e:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:43:47 2025 by rpki-client