Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa
File:                     7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa (raw, json)
Hash identifier:          gOlWaQ2SxOBONd5LKuX8N+UeUGPz79j+t9hQDxMRnDE=
Subject key identifier:   65:B1:F7:3E:FB:42:F3:1F:99:6F:8C:1E:60:A3:5E:2B:15:00:54:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A74B5DAC788DA9208177C0020
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d80:3d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:da:c7:88:da:92:08:17:7c:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=43b6d832-cd13-4d1d-be64-02441996697b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:a1:68:19:e9:c4:c6:97:6c:04:5b:d2:58:
                    91:7b:23:de:04:48:f1:c5:ad:d5:f3:c2:d3:ad:dc:
                    ab:6b:65:c5:e0:79:f2:36:31:ea:2d:a0:48:e7:e1:
                    e3:91:be:e6:7e:f6:85:0c:17:18:06:8a:09:4c:07:
                    96:c5:d0:25:4e:e1:8e:3b:ac:9f:e6:93:fe:78:23:
                    9e:02:4f:5f:8c:4a:82:9c:6c:13:ee:15:55:60:18:
                    59:69:0d:4a:9c:73:3d:b8:76:38:00:f4:87:2b:df:
                    c6:67:2a:1f:af:c8:d5:02:48:22:24:5c:02:7a:66:
                    81:75:72:ad:d4:3c:a2:59:af:53:66:e1:85:23:1b:
                    0b:20:5c:e9:02:33:eb:59:7c:9e:dc:26:7f:55:ad:
                    dd:8b:96:0a:98:24:32:6d:cd:a2:8e:11:58:bf:1b:
                    8b:36:b4:30:71:7a:c6:4d:aa:da:1a:5d:08:2b:9f:
                    bb:11:60:23:a5:df:23:41:14:94:8a:7f:84:dc:d1:
                    4f:f1:45:73:9f:36:20:77:e9:63:92:28:c3:42:64:
                    8a:98:eb:c2:a2:e5:e3:fb:f6:4b:45:ab:ef:66:0c:
                    67:28:da:08:6d:70:0b:74:83:07:d7:b0:ee:83:34:
                    5d:9c:76:bc:e9:7e:77:4b:db:f4:84:76:a4:00:5b:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B1:F7:3E:FB:42:F3:1F:99:6F:8C:1E:60:A3:5E:2B:15:00:54:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7bbc8b-43c9-3d46-813b-5c81c8870e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:29:d5:9a:5b:5a:cd:0a:ad:38:37:4c:92:24:a3:bb:69:
         c6:a2:f6:2b:d8:66:f0:87:5e:c4:ea:45:57:b8:da:2e:67:1b:
         7b:7f:af:b9:bf:83:6c:de:da:74:d0:94:00:22:63:70:00:85:
         f9:bb:9a:db:e5:59:14:3d:28:3a:66:87:b8:de:5f:96:bb:63:
         2c:9f:5a:10:e2:6c:6a:a8:a0:d6:75:94:ec:8d:c0:f1:b0:e1:
         0e:c7:6e:60:df:23:d2:df:11:e3:1b:26:21:cc:1c:11:75:0c:
         b2:45:11:a3:98:78:9e:2d:4d:0c:e6:7f:f6:73:1f:b3:8a:11:
         b4:19:88:9f:38:bb:e9:47:f9:4b:ca:7d:6d:87:9b:26:dc:28:
         6f:57:d0:fc:e6:f7:52:2b:06:5b:f8:42:e3:2b:5c:46:36:ca:
         b8:0d:03:37:fb:43:4d:ab:19:22:8d:29:23:5b:e6:bc:13:fe:
         32:1c:14:32:0a:de:c5:7e:b2:4a:73:92:22:ab:bd:4e:31:45:
         4d:ad:3e:cc:90:ab:08:f8:39:6c:f6:e9:3a:d4:bf:53:3d:8e:
         ed:20:21:a0:3b:25:4a:9c:58:af:60:e3:ff:eb:fb:74:94:a7:
         71:89:8c:36:20:4a:e3:e5:bf:43:b8:4b:e7:fb:82:73:d9:c1:
         b9:3a:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:59:54 2025 by rpki-client