Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa
File:                     bee56e3f-a533-30b8-aa13-9fbeab18c069.roa (raw, json)
Hash identifier:          Zsw29MmuEbPkpmFl/84f2VCSMHW8meGzh6Nw0qwlYYU=
Subject key identifier:   0D:3C:08:12:90:C2:D8:B0:5C:07:60:6F:C5:E4:4D:39:88:AE:85:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5C13D783DC0652BE5A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5c:13:d7:83:dc:06:52:be:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=b7df2052-e0ec-49ed-b0fb-f4e38ad87161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:7c:c1:1e:ee:b8:8a:fe:ec:4f:bb:ba:88:
                    2c:e4:99:b7:9e:58:b1:97:d7:7a:41:57:5e:bc:28:
                    89:b7:d2:92:4a:28:f6:fe:4c:13:40:bc:76:e9:74:
                    2d:d6:3b:fe:1f:c1:69:05:b8:60:53:c1:1e:11:c6:
                    05:c7:ff:c5:8b:f2:81:6f:df:a2:c1:d4:fc:3a:04:
                    14:ce:06:2e:7d:ba:91:23:29:4c:54:df:e2:2f:d5:
                    82:a5:73:4f:24:64:af:2c:8e:6b:39:48:81:07:21:
                    0e:49:d8:e5:31:09:3c:32:63:1d:f1:df:79:f9:55:
                    b4:de:85:d0:a4:24:17:5b:87:c2:9b:91:6f:84:69:
                    fc:bc:7e:9e:15:d4:d0:5e:ae:f1:64:bd:f0:e8:8c:
                    5c:d6:80:82:91:31:69:52:a8:9e:68:34:95:f9:96:
                    f3:44:a8:c7:88:6d:dc:ff:56:ed:96:d9:75:1c:12:
                    06:41:29:84:75:ee:66:ee:0c:a6:74:c6:2a:a1:24:
                    c3:fc:08:cd:2e:1d:88:d1:c8:b7:a3:2c:e1:e8:30:
                    43:a2:2b:4c:bb:80:da:b1:10:0c:21:db:06:b4:ae:
                    1c:0a:71:f7:18:7c:43:35:0b:9a:50:ab:02:55:41:
                    19:fa:37:69:e7:41:0d:35:68:d7:18:7e:3b:95:2e:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:08:12:90:C2:D8:B0:5C:07:60:6F:C5:E4:4D:39:88:AE:85:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:86:9e:f8:52:5c:ed:d0:8a:1d:d9:fa:86:32:6c:56:57:
         c8:82:b6:d3:d9:c4:45:c3:f6:96:cb:94:cb:86:11:0a:a3:ad:
         e6:42:3b:3c:96:06:51:67:b7:36:ca:e6:d5:b6:ac:81:e2:a4:
         3c:da:34:d0:77:5d:3a:c2:bc:ac:55:32:87:7d:e2:92:6f:ba:
         3a:85:3e:24:25:2d:6c:13:90:ec:76:cd:65:ea:ef:00:63:44:
         8c:1a:3f:34:64:91:99:bc:7e:4b:1f:36:4e:9c:69:96:37:e4:
         d3:8f:b8:00:08:8d:4e:58:0a:26:99:78:d9:91:5d:fd:02:f4:
         2a:dd:3d:f2:6c:44:39:84:6c:ed:d2:22:34:ed:d2:5f:51:a6:
         e2:ae:54:bf:b0:09:bd:74:20:1f:12:af:87:c5:4a:57:8e:87:
         87:d5:83:35:c1:c6:6c:27:61:23:aa:cf:8b:33:27:83:4a:4b:
         9c:53:13:f1:1b:5a:52:38:5a:4b:42:33:51:96:cb:ce:14:b5:
         f9:7d:2e:1c:01:84:aa:0f:97:e2:ff:bf:fc:da:91:7e:1d:6f:
         0c:32:8e:0c:ea:7b:7f:a8:a5:55:5e:da:f8:f0:56:3e:4c:52:
         99:f7:c8:3d:17:f8:27:5b:c3:0e:23:1f:6e:70:6c:bb:c3:83:
         02:02:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:36:46 2025 by rpki-client