Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1aba0021-c16d-317a-bd94-89126330570e.roa
File:                     1aba0021-c16d-317a-bd94-89126330570e.roa (raw, json)
Hash identifier:          vxxvSerJDn1hBHLTh3yUu3vmTM1fF3VIqexzyah6Wx4=
Subject key identifier:   2D:1B:B7:94:40:49:AB:5E:B3:7F:D8:57:12:B8:D0:54:B3:32:CB:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849DD3C20A314FA9A7F6CC316C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1aba0021-c16d-317a-bd94-89126330570e.roa
Signing time:             Thu 15 May 2025 18:48:37 +0000
ROA not before:           Thu 15 May 2025 18:48:37 +0000
ROA not after:            Wed 13 Aug 2025 18:48:37 +0000
asID:                     30036
IP address blocks:        2604:2d81:a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:3c:20:a3:14:fa:9a:7f:6c:c3:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 15 18:48:37 2025 GMT
            Not After : Aug 13 18:48:37 2025 GMT
        Subject: CN=0636c276-10d4-44da-aae4-b2638ebcb378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:2f:55:c4:19:e0:21:37:a2:a7:bc:17:e3:
                    29:2c:8b:af:af:ee:9b:fa:e7:d4:c5:bf:b4:ea:b1:
                    76:e1:92:cd:e5:04:81:1d:1b:01:b1:8e:95:a0:01:
                    fe:5d:79:3c:c0:db:98:0e:eb:93:8c:05:8e:6b:d2:
                    b5:d2:bb:22:fa:89:cc:b2:c2:f2:10:52:08:ee:0f:
                    31:5b:3d:6b:cf:7b:58:14:cf:86:b9:5e:7b:d0:40:
                    e7:61:71:2e:f2:98:01:44:16:73:27:e9:79:99:1f:
                    25:6e:56:52:b7:01:49:fb:77:dc:f9:1f:22:91:22:
                    e9:f7:4d:2e:be:90:0d:32:23:e7:b5:5d:79:35:3f:
                    88:42:3a:ae:95:eb:1a:94:8e:3a:6b:2c:d6:2b:99:
                    09:cb:92:de:f0:c4:1c:7a:1a:eb:d2:19:06:3d:65:
                    5d:dc:e1:37:fe:01:11:be:38:96:a0:08:76:af:59:
                    c9:4d:50:0e:48:0b:89:8e:62:d7:7b:0a:fb:c7:13:
                    e8:b3:eb:f9:81:27:49:0f:95:e0:4e:88:8f:ca:d6:
                    83:84:6d:72:3a:4c:20:99:9f:03:2a:eb:af:e5:6f:
                    32:49:2a:6a:a1:db:f5:b7:8a:15:23:60:47:5b:65:
                    6a:f0:be:96:fe:b6:b9:d3:90:13:7f:ad:6a:35:cf:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:B7:94:40:49:AB:5E:B3:7F:D8:57:12:B8:D0:54:B3:32:CB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1aba0021-c16d-317a-bd94-89126330570e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:15:35:d2:30:3d:d2:53:6f:b5:24:e2:ff:11:bc:00:fa:0f:
         94:5e:16:28:23:67:a2:90:be:56:8f:5b:b1:7f:7a:05:b3:c9:
         c5:ef:b1:6a:d5:1f:2c:ee:1f:0e:25:3e:69:01:8f:56:4b:dc:
         3f:ac:f3:d0:4c:0c:fc:ff:e0:5a:7e:1f:46:d3:a7:54:bc:13:
         cd:63:1a:d2:6c:ac:50:82:57:6b:2c:4d:4d:ec:5a:9e:4d:5c:
         9d:11:e5:c4:ce:63:ba:e4:f2:a5:8e:4d:ac:5e:6f:f4:2a:85:
         dc:a0:92:a3:d9:5b:39:d1:53:4c:84:eb:dd:01:15:6f:6a:a8:
         bf:c3:54:0e:22:8f:bc:28:0d:e0:6d:bf:4f:25:a3:b7:95:32:
         8b:c5:6c:cf:10:cd:0f:04:e1:ea:ab:24:0a:e7:95:f4:28:56:
         33:12:8d:77:f5:a8:b1:21:bd:06:83:2f:23:36:7b:be:72:bf:
         bd:2e:16:a1:1d:6d:ec:6c:98:2f:30:9f:11:1b:22:fa:fe:cd:
         34:07:87:4e:b9:4c:b9:ea:65:08:e1:ae:d0:b8:d9:6a:bc:3c:
         d4:a4:de:d2:ee:dc:ba:76:25:1f:67:49:8a:c9:c7:61:12:f0:
         09:12:fb:21:a9:ff:0e:90:8d:51:11:09:49:d0:52:0f:88:01:
         db:b0:f8:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEndPCCjFPqaf2zDFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDUxNTE4NDgzN1oXDTI1MDgxMzE4NDgzN1owLzEtMCsGA1UEAxMk
MDYzNmMyNzYtMTBkNC00NGRhLWFhZTQtYjI2MzhlYmNiMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVwvVcQZ4CE3oqe8F+MpLIuvr+6b+ufUxb+0
6rF24ZLN5QSBHRsBsY6VoAH+XXk8wNuYDuuTjAWOa9K10rsi+onMssLyEFII7g8x
Wz1rz3tYFM+GuV570EDnYXEu8pgBRBZzJ+l5mR8lblZStwFJ+3fc+R8ikSLp900u
vpANMiPntV15NT+IQjqulesalI46ayzWK5kJy5Le8MQcehrr0hkGPWVd3OE3/gER
vjiWoAh2r1nJTVAOSAuJjmLXewr7xxPos+v5gSdJD5XgToiPytaDhG1yOkwgmZ8D
Kuuv5W8ySSpqodv1t4oVI2BHW2Vq8L6W/ra505ATf61qNc+RxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC0bt5RASates3/YVxK40FSzMsuZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFiYTAwMjEtYzE2ZC0z
MTdhLWJkOTQtODkxMjYzMzA1NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQoA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGcVNdIwPdJTb7Uk4v8RvAD6D5ReFigjZ6KQvlaPW7F/egWzycXv
sWrVHyzuHw4lPmkBj1ZL3D+s89BMDPz/4Fp+H0bTp1S8E81jGtJsrFCCV2ssTU3s
Wp5NXJ0R5cTOY7rk8qWOTaxeb/QqhdygkqPZWznRU0yE690BFW9qqL/DVA4ij7wo
DeBtv08lo7eVMovFbM8QzQ8E4eqrJArnlfQoVjMSjXf1qLEhvQaDLyM2e75yv70u
FqEdbexsmC8wnxEbIvr+zTQHh065TLnqZQjhrtC42Wq8PNSk3tLu3Lp2JR9nSYrJ
x2ES8AkS+yGp/w6QjVERCUnQUg+IAduw+BA=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:11 2025 by rpki-client