Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00f610da-75e4-37fd-8ff0-c0f9ab810afb.roa
File:                     00f610da-75e4-37fd-8ff0-c0f9ab810afb.roa (raw, json)
Hash identifier:          mqm7SR9TXfe0ufKOWJUCYWowILyl/oS0tDZRk9V5gKw=
Subject key identifier:   7C:22:D7:7D:86:41:FE:87:6A:E8:D4:6B:B0:92:E5:66:0D:C7:2D:13
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A750368D8B0BE6F09F2213E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00f610da-75e4-37fd-8ff0-c0f9ab810afb.roa
Signing time:             Wed 09 Jul 2025 03:37:13 +0000
ROA not before:           Wed 09 Jul 2025 03:37:13 +0000
ROA not after:            Tue 07 Oct 2025 03:37:13 +0000
asID:                     19905
IP address blocks:        2604:2d80:2b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:75:03:68:d8:b0:be:6f:09:f2:21:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 03:37:13 2025 GMT
            Not After : Oct  7 03:37:13 2025 GMT
        Subject: CN=fe49b374-23f9-4934-8bf6-e13212f9d365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:5d:9a:92:d4:c4:28:e5:d3:72:53:f1:75:
                    3f:5e:8f:8c:29:2d:ef:7a:50:5e:4e:7a:85:88:95:
                    41:95:0e:fd:f1:2c:2b:8a:e3:a4:55:c3:2b:3e:56:
                    65:de:c9:30:fe:73:73:0a:ff:9c:33:6b:a2:0a:8e:
                    a9:68:e9:6e:ce:4f:1c:27:74:6d:aa:07:cf:00:17:
                    a4:bd:4d:27:b4:10:1b:1a:53:ec:e5:5a:2d:33:80:
                    2c:19:51:07:68:13:fb:90:58:45:cf:00:75:d5:1a:
                    77:bb:c3:7c:30:2a:85:b3:df:b9:0b:c9:15:cc:51:
                    c0:67:d0:dc:36:c2:34:90:ef:c7:56:48:a7:0e:56:
                    c0:db:86:a8:e0:8c:f4:ae:be:f1:ce:7c:15:68:d9:
                    52:db:95:7c:1e:7a:a0:bd:05:6a:67:1a:9d:3b:77:
                    6c:f6:f5:01:71:ab:b4:4d:9b:34:18:37:61:20:f6:
                    e0:d8:3c:fa:3a:b4:30:49:61:2f:a6:f8:e3:c2:a6:
                    00:53:da:bd:88:a3:8f:a6:db:55:29:2c:70:74:d6:
                    24:e1:2b:c7:bb:3b:b8:2a:30:32:6d:d7:3d:ac:9d:
                    1f:0e:5b:46:05:02:47:c7:ed:27:66:88:95:f5:bb:
                    5e:f2:9b:a7:b4:7a:4b:f3:ae:dc:c5:cd:dc:f5:58:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:D7:7D:86:41:FE:87:6A:E8:D4:6B:B0:92:E5:66:0D:C7:2D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00f610da-75e4-37fd-8ff0-c0f9ab810afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8f:25:ff:35:2b:fd:56:cf:21:5e:33:c2:22:be:8b:6e:a6:
         d6:9c:5a:6b:07:6f:ca:07:ab:11:7b:8d:2f:75:1e:d2:6c:32:
         8a:22:3c:87:93:a8:d9:d6:80:65:7c:89:34:63:d6:b3:97:f6:
         e2:20:85:bd:1f:a4:7e:3b:49:56:78:f9:43:53:a2:35:ad:66:
         61:6c:32:b8:d0:5a:62:a7:52:67:c7:9f:24:95:8c:fe:06:1c:
         37:5b:23:bd:43:ea:07:13:1f:08:8c:a2:da:11:04:ba:3d:2e:
         16:fe:09:d1:bc:5f:3e:c5:9d:e0:7f:ba:e4:88:60:bb:78:df:
         88:02:bd:35:2e:48:13:70:da:b8:48:37:4d:b1:63:3a:d4:62:
         c8:bf:91:58:8f:17:bd:13:48:75:36:2a:de:7e:de:ab:aa:06:
         2c:11:b1:1a:ca:2b:d8:c5:7c:e6:71:b1:71:a9:40:c2:6e:dc:
         dd:16:6b:3e:21:91:f1:e4:09:df:f5:5c:2f:23:ea:0e:a8:b2:
         a7:ae:d1:5b:e4:61:9e:e3:f8:20:83:f4:2a:99:f5:35:f4:a8:
         0e:8a:10:93:a4:93:b4:94:bd:7d:16:9b:14:9d:df:33:9a:66:
         c7:b2:d1:d0:77:78:90:50:6b:3b:96:31:74:16:4d:07:ba:f3:
         bb:6e:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:06:21 2025 by rpki-client