Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
File:                     cb76e5e5-90cd-3772-b590-6b1405a26307.roa (raw, json)
Hash identifier:          w7rkZq9n1RS5sdwmffjCPZlq/J24RV9YmgeeDU/4OrI=
Subject key identifier:   4D:18:BC:B4:BB:C0:C8:CC:65:56:D1:B1:6F:31:9A:79:D8:96:24:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B75C3871EC739ADE94C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:7f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:75:c3:87:1e:c7:39:ad:e9:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=71772b84-67e5-467b-9272-cdd88cf47ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:9a:72:51:80:2f:31:18:1d:ec:de:94:a4:
                    0d:f7:cc:6c:bb:cc:7b:1a:c0:6a:4b:38:b9:2e:6f:
                    1e:92:5b:3c:06:42:70:65:5e:fb:2e:92:9b:4f:41:
                    a9:58:67:8a:a6:cc:a1:16:40:67:e3:f2:22:33:42:
                    1a:f7:9e:68:04:c9:5b:6d:08:ec:af:d8:32:b0:fb:
                    18:9a:51:d7:fd:9a:dd:b2:c1:2a:5a:68:f3:f5:ed:
                    ec:53:aa:28:05:14:74:de:f9:80:d7:5d:85:2c:d7:
                    c9:f3:38:5c:3f:35:d1:df:92:33:e7:bc:73:8c:2d:
                    72:d2:71:44:7a:19:e5:cb:cd:ce:c9:d4:34:8e:5d:
                    43:04:92:90:dd:d4:95:81:dd:cd:84:2a:d3:f8:99:
                    18:a9:19:bc:f9:bf:fd:0a:28:4e:9e:60:2d:a6:ea:
                    fe:3b:d3:4d:3b:46:7f:0e:4d:38:c1:01:dd:08:84:
                    7f:69:4b:69:d6:0d:3b:10:b4:ab:1a:ff:5d:69:c1:
                    65:77:f7:9e:50:d9:6a:c8:f6:b1:9e:b0:c8:85:2d:
                    9b:5f:1e:43:8c:cc:69:8d:91:eb:91:bf:44:9b:0d:
                    34:d8:e0:48:2c:ea:44:f9:54:e1:d5:6f:70:d7:3a:
                    cc:79:84:d5:9d:cb:71:81:22:d5:a4:25:01:97:ab:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:BC:B4:BB:C0:C8:CC:65:56:D1:B1:6F:31:9A:79:D8:96:24:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:17:e6:7f:78:e1:78:d3:c7:6e:b8:c6:1c:3b:ab:57:25:
         e5:b9:c2:9a:64:ad:ed:b1:4a:f3:e8:d6:d8:24:f0:9b:28:e4:
         e7:06:2a:bd:9f:7b:c1:ec:51:d3:42:63:5c:e5:b6:ea:c9:62:
         2d:fb:b9:1d:a3:9c:22:33:56:3c:75:d9:ff:c3:31:3e:92:8a:
         bf:e0:f7:42:f4:23:d6:6f:ff:c9:16:c3:9e:83:69:0b:09:b5:
         70:72:9d:77:54:a8:77:d2:59:74:92:c0:6a:fa:01:48:c2:e4:
         b5:69:31:5c:cb:94:7e:d1:05:4f:24:35:fb:6e:16:a0:e5:2f:
         b2:36:77:0c:04:b1:8f:00:50:0a:ca:fb:af:76:15:e6:ab:fd:
         c1:7b:da:c8:8a:20:fc:22:53:ac:2c:ba:5a:67:be:10:74:2b:
         1a:0b:8f:b4:f3:4f:ea:d1:d5:b0:74:9c:f7:5c:c0:65:ae:5d:
         6a:f2:9b:0a:2b:2d:eb:5b:5b:02:d1:f0:13:67:5b:9c:10:79:
         d4:78:e9:0f:b0:9f:19:17:4a:48:b7:0f:52:22:f4:5b:47:28:
         d5:52:d6:0f:01:e7:d3:53:13:ff:b3:ba:be:5f:86:f9:48:d2:
         74:dc:63:46:9d:8d:f8:76:b4:41:39:09:31:2d:1d:88:04:0a:
         74:01:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:10:23 2025 by rpki-client