Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa
File:                     675e80aa-7892-34b7-902e-0b7012e45198.roa (raw, json)
Hash identifier:          Q1+Cl+s+ne8P0Qy9Oi8VZagHHkXzWoI/yeWiNCv712w=
Subject key identifier:   C8:26:22:05:C4:0D:AD:D8:16:0A:1F:80:6D:EC:96:AE:38:72:D5:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AE67B963D3A091325CAD7AD10
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa
Signing time:             Mon 18 Aug 2025 19:05:42 +0000
ROA not before:           Mon 18 Aug 2025 19:05:42 +0000
ROA not after:            Sun 16 Nov 2025 20:05:42 +0000
asID:                     19905
IP address blocks:        2604:2d81:2500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7b:96:3d:3a:09:13:25:ca:d7:ad:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 18 19:05:42 2025 GMT
            Not After : Nov 16 20:05:42 2025 GMT
        Subject: CN=1a3171f7-af64-41b4-a809-339d9f2e4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:60:b2:31:f0:cb:f1:4b:a7:ac:bc:b9:6c:
                    fe:45:7f:5f:7a:0b:06:11:b9:00:a0:a0:40:ba:45:
                    e9:b5:bb:69:62:15:d6:40:a7:8a:92:f4:8d:9a:ef:
                    e1:57:70:4a:6b:23:a8:8e:02:c6:a1:0a:c4:4c:db:
                    57:fe:37:64:59:6d:5f:60:73:bf:8a:d8:b0:65:5e:
                    b9:f8:ee:9a:9a:be:7e:f1:10:3c:49:f2:da:4b:f3:
                    2e:6c:4e:48:ec:00:9a:da:f5:7b:ee:0a:c2:fe:2b:
                    c2:74:ae:b8:79:c8:8e:be:52:6d:d7:68:8c:01:f9:
                    8d:24:08:02:6d:1a:ca:86:22:86:95:36:87:00:94:
                    b5:ce:62:c4:ab:55:3a:4f:c1:0a:b2:fe:37:69:87:
                    0b:ce:0d:5a:6d:38:cd:6c:1f:d5:3f:42:22:5e:ce:
                    d7:bb:ab:0c:e8:97:3a:8b:38:5e:09:d5:a6:42:83:
                    fb:14:7b:68:d8:3e:58:bd:ed:3d:92:5e:7a:79:d8:
                    03:21:0b:c7:72:69:6e:5c:49:ee:ea:ce:a4:c5:42:
                    9e:1e:62:d3:da:68:f8:38:0a:09:61:60:f3:59:c2:
                    d9:8a:bb:ac:ac:80:81:39:78:6e:1f:8a:1d:dd:50:
                    0c:94:4b:6b:c1:8a:a8:cf:55:08:fb:3f:ea:12:b1:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:22:05:C4:0D:AD:D8:16:0A:1F:80:6D:EC:96:AE:38:72:D5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:87:2c:30:95:d9:80:a7:85:1e:4a:da:17:b9:06:1d:89:
         10:36:c1:65:8a:65:a2:71:43:e9:b0:e0:de:d6:a0:80:73:0f:
         d5:ed:a0:36:95:c1:70:9b:54:21:af:bf:27:c9:54:12:15:2b:
         07:4f:76:b9:91:7a:09:2d:2e:84:fd:aa:eb:36:30:50:f5:eb:
         7f:61:22:1c:6d:8c:b5:e9:7e:74:10:a3:3f:56:97:c9:a0:6c:
         18:a5:2d:08:9a:36:45:a4:f2:51:4a:22:fc:6d:77:d8:c3:ac:
         a3:b6:c2:55:ee:dc:53:83:1c:30:ef:f3:17:2a:ae:e9:8c:0b:
         05:11:29:17:1c:fc:33:68:80:b0:21:7f:d4:b0:6f:f3:04:42:
         b0:fa:7d:88:ec:ca:8d:73:a2:c9:39:ec:65:a0:3f:6c:87:42:
         3b:c2:66:1a:34:18:c0:03:7e:67:66:3b:4d:98:de:e2:d8:2c:
         56:f9:0a:a7:1c:99:da:44:34:a2:47:de:1d:84:e8:cf:85:00:
         51:3d:78:5e:2d:74:50:63:7d:b3:80:47:18:59:df:82:ce:87:
         b6:4b:f7:29:a0:a7:57:32:69:d8:a4:97:14:4e:15:12:cb:48:
         f9:9f:25:f7:12:e5:c2:65:8a:38:a2:c6:39:7b:e7:f0:46:9e:
         75:27:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:25 2025 by rpki-client