Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa
File:                     45d9621f-4e1d-31af-8893-68712fec79cd.roa (raw, json)
Hash identifier:          IB1M1D1eJ1LKK0/h9L9p3WAow7h6CADqqWp99KNTS3g=
Subject key identifier:   22:EB:0C:67:0E:5B:7A:92:49:BC:9D:63:E0:31:4E:C1:64:DB:AB:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD3A1258C8DEE0C4D7C126400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:25:8c:8d:ee:0c:4d:7c:12:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=7b0c7f23-8abb-4e5b-a99b-2d739910f539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:f9:7e:c3:c6:86:7c:29:a3:32:63:ca:c5:
                    f5:43:ce:2a:b5:f1:f9:98:25:88:1e:82:e1:15:ac:
                    45:24:41:c3:82:2d:c4:d2:28:ac:31:72:6e:c0:bb:
                    7f:a5:5e:28:56:ba:6e:b8:c0:34:d8:1b:f5:a0:06:
                    bf:3a:ce:b6:01:5e:9d:79:61:8d:76:66:8e:39:63:
                    46:41:e4:c7:60:aa:f8:ae:56:de:55:9b:e1:24:8f:
                    33:90:95:70:b8:ec:6c:d8:2a:a4:20:e5:45:bb:71:
                    8f:2e:64:9d:95:0b:b4:b1:a0:6c:ef:7a:e0:9f:12:
                    33:20:85:7c:8c:8b:db:b3:0b:5a:72:87:f7:b3:c9:
                    93:5f:b0:24:58:a8:40:3b:02:52:1f:50:2d:6c:89:
                    3b:06:b7:a2:24:7b:ee:70:db:29:9a:32:87:b7:8a:
                    95:4b:c4:ec:ce:54:e9:1f:8a:b4:30:c9:4f:3c:e2:
                    10:9f:7d:44:56:09:c6:90:1e:53:62:4b:e5:bf:13:
                    d9:ed:45:50:ae:59:fc:f0:12:88:ee:97:25:e0:cd:
                    c5:0a:72:2f:46:18:4f:9c:f4:8d:4b:25:07:fc:87:
                    ce:85:03:9c:19:79:5c:b7:60:e0:b3:2a:47:24:1f:
                    7f:7f:19:3d:05:69:26:94:f7:51:c5:cb:c4:b5:f2:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:0C:67:0E:5B:7A:92:49:BC:9D:63:E0:31:4E:C1:64:DB:AB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:05:22:7c:ef:57:96:0d:37:10:4f:d5:e4:a1:b4:6f:30:86:
         48:43:24:f2:5f:ab:0d:31:9a:25:91:e8:65:04:4c:c0:b2:0e:
         c3:fd:53:8a:36:b5:14:e8:6e:d8:b1:84:7d:6b:96:bd:a5:de:
         90:29:a5:b6:0c:b4:74:ef:5a:20:30:f3:87:0f:ce:c9:ff:26:
         ca:6d:b7:38:98:d0:0a:dd:15:3b:fb:de:2f:ee:3e:97:82:75:
         fa:3b:b4:cd:37:6e:e3:e6:80:b4:d5:f6:d9:e1:c8:51:6e:d7:
         0e:2e:3d:47:06:6a:31:f1:63:a0:4e:19:cc:e8:c9:49:15:22:
         3d:e5:18:30:d0:88:80:d4:99:64:a1:02:25:1c:1e:fe:6d:47:
         88:fb:f6:92:dc:a4:6d:77:5a:6f:63:e9:bc:14:6b:a1:27:fe:
         fb:7b:46:b5:e7:24:c8:c3:3a:ad:6c:36:80:4f:45:ec:84:42:
         74:9a:58:93:be:27:c1:90:1e:dc:ed:a1:cc:c2:a0:0c:91:97:
         ef:29:88:4e:c2:70:1e:aa:3c:61:fe:ba:f3:c1:29:e5:12:82:
         0c:a8:00:99:64:9b:8d:f8:7f:22:1b:60:de:e9:11:b1:fe:34:
         66:fc:3a:06:af:0d:1d:9a:da:ea:56:b1:e0:cb:1c:56:c2:2f:
         bf:18:87:e9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErToSWMje4MTXwSZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
N2IwYzdmMjMtOGFiYi00ZTViLWE5OWItMmQ3Mzk5MTBmNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHf5fsPGhnwpozJjysX1Q84qtfH5mCWIHoLh
FaxFJEHDgi3E0iisMXJuwLt/pV4oVrpuuMA02Bv1oAa/Os62AV6deWGNdmaOOWNG
QeTHYKr4rlbeVZvhJI8zkJVwuOxs2CqkIOVFu3GPLmSdlQu0saBs73rgnxIzIIV8
jIvbswtacof3s8mTX7AkWKhAOwJSH1AtbIk7BreiJHvucNspmjKHt4qVS8TszlTp
H4q0MMlPPOIQn31EVgnGkB5TYkvlvxPZ7UVQrln88BKI7pcl4M3FCnIvRhhPnPSN
SyUH/IfOhQOcGXlct2DgsypHJB9/fxk9BWkmlPdRxcvEtfJ4PQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCLrDGcOW3qSSbydY+AxTsFk26sgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDVkOTYyMWYtNGUxZC0z
MWFmLTg4OTMtNjg3MTJmZWM3OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKAUifO9Xlg03EE/V5KG0bzCGSEMk8l+rDTGaJZHoZQRMwLIOw/1T
ija1FOhu2LGEfWuWvaXekCmltgy0dO9aIDDzhw/Oyf8mym23OJjQCt0VO/veL+4+
l4J1+ju0zTdu4+aAtNX22eHIUW7XDi49RwZqMfFjoE4ZzOjJSRUiPeUYMNCIgNSZ
ZKECJRwe/m1HiPv2ktykbXdab2PpvBRroSf++3tGteckyMM6rWw2gE9F7IRCdJpY
k74nwZAe3O2hzMKgDJGX7ymITsJwHqo8Yf6688Ep5RKCDKgAmWSbjfh/Ihtg3ukR
sf40Zvw6Bq8NHZra6lax4MscVsIvvxiH6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:32 2025 by rpki-client