Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa
File:                     71cbf453-6d36-3e18-8277-96df3a65c514.roa (raw, json)
Hash identifier:          qoPUMSL7FeSSbgGxruwX+g+739EbcdYeN01OdtwGTsA=
Subject key identifier:   A0:B4:B7:CC:E3:D7:46:20:3B:B9:65:CE:87:C2:E5:D3:76:68:3D:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D63F69D596EE50C9A32C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:1100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3f:69:d5:96:ee:50:c9:a3:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=f9ce93f1-0e8b-473f-a60e-ef7504feedf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:1f:f3:84:77:7e:e3:7f:2c:0b:09:88:ce:
                    3f:67:38:06:a7:85:d3:6f:72:57:81:53:92:23:20:
                    98:12:43:3b:a4:78:2e:27:41:47:69:b9:41:2f:73:
                    ae:cf:fc:c2:04:2e:71:8e:84:2d:34:5a:d0:1f:38:
                    37:d1:2a:7e:1d:95:8a:bb:85:b2:da:ca:8f:19:1d:
                    93:bc:ef:29:f3:a1:7c:c7:56:d1:e7:d1:d0:9c:33:
                    b8:aa:40:04:2f:be:b4:33:30:07:46:9e:ef:52:e8:
                    3a:8c:89:1b:97:45:c4:3a:8a:b8:d6:69:d0:9a:7e:
                    26:36:c1:bd:8d:65:be:d9:dd:c9:9d:c3:8b:4d:c5:
                    64:7a:80:85:74:d6:00:44:ae:ec:a1:19:39:43:53:
                    54:58:4a:06:85:fb:af:7b:ae:16:73:96:e4:f1:d3:
                    25:89:73:55:90:b7:16:11:49:b6:ea:34:76:63:f9:
                    c7:df:a1:84:62:0b:3c:50:d4:62:bd:b1:17:88:00:
                    3a:34:83:ac:df:18:c2:33:68:4f:aa:c3:fa:23:f9:
                    59:47:bb:47:e1:c2:3f:14:d2:f2:94:82:c8:c7:48:
                    46:47:72:47:bc:72:4f:97:0e:a5:8b:a1:1f:3c:5b:
                    66:7f:a0:f4:f7:da:68:94:dc:34:31:42:4f:5d:26:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:B7:CC:E3:D7:46:20:3B:B9:65:CE:87:C2:E5:D3:76:68:3D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71cbf453-6d36-3e18-8277-96df3a65c514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8c:a5:36:25:d6:4f:5e:a4:bc:ab:f3:a5:5b:20:c0:94:31:
         9b:b2:95:46:b5:6d:3b:97:ba:72:9e:4c:03:3d:ae:e5:d7:87:
         78:c6:99:34:07:bd:0b:54:ad:ab:51:6f:3c:85:23:35:2a:dc:
         6b:e5:13:d2:13:00:a9:89:59:66:27:64:35:f4:ab:b9:77:ec:
         63:b5:6d:13:49:6b:c1:d0:99:5a:94:73:92:30:b9:88:c7:46:
         66:d6:dc:53:17:83:26:f5:3d:f3:69:eb:27:10:bf:5b:a8:7e:
         e0:37:41:2d:91:c7:65:75:56:18:39:30:dd:e1:92:9c:0c:82:
         1f:9c:d9:93:50:f5:ab:03:3e:8f:98:b6:ad:d7:ef:12:bb:58:
         c9:e7:d7:ab:f2:e1:5a:19:ed:3d:87:ea:d3:f9:1c:80:ff:4a:
         09:04:14:e9:e4:80:00:88:a0:70:2a:a0:0a:6b:24:ee:1a:59:
         7c:88:f4:52:e4:e9:f1:f8:b9:d2:89:bd:a4:2d:3b:c4:60:12:
         5f:4e:82:bd:06:2e:c0:18:26:d1:37:ea:0c:08:32:c2:55:12:
         c7:26:0a:b5:d0:70:54:36:6a:89:b3:80:86:03:57:62:f7:d0:
         11:aa:43:70:3c:3b:b8:9b:7c:d2:9c:bd:a6:19:ec:58:91:f7:
         92:7e:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:55 2025 by rpki-client