Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa
File:                     77633310-8b30-354f-9e02-273bb1ce6755.roa (raw, json)
Hash identifier:          2op1m63q2ARqCwosBV21jj08ZZBSqazW53QAkkXcEkg=
Subject key identifier:   BC:6A:B8:17:D1:48:24:98:25:01:F6:DF:82:60:E8:96:AE:67:63:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E5210991B347C3CC364100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:21:09:91:b3:47:c3:cc:36:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=4c35a9e8-dfa9-4dc8-b862-2caa05ce8820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:cc:cf:46:6c:93:c4:7e:22:06:f8:bc:a1:
                    0b:30:2a:0d:a9:44:70:9f:d6:34:05:4a:36:62:2f:
                    e8:6f:e5:82:ba:06:46:7c:bb:8a:cd:9e:30:76:e0:
                    08:70:d0:f7:2d:82:b2:91:ad:df:e2:b2:54:b3:c7:
                    ad:7a:49:6e:1f:2a:ab:67:83:b4:26:09:37:5a:7c:
                    7d:b7:9d:94:49:85:90:1e:22:7b:f5:dd:2c:34:54:
                    84:d0:a7:10:72:ee:c2:22:97:5e:53:82:d0:f8:2c:
                    5e:10:76:eb:26:eb:36:98:c9:95:27:3e:4b:08:38:
                    95:0e:68:d6:fb:a1:57:a4:ce:c6:b2:02:06:7b:b8:
                    6c:ce:71:c0:69:47:58:a9:0a:9c:29:76:99:fe:25:
                    44:a2:0a:ef:7b:80:70:4d:7e:f7:cd:38:50:cb:be:
                    5b:6d:13:55:74:e0:8e:ea:41:6c:ab:d1:b2:d5:30:
                    54:71:de:7c:08:aa:c0:62:62:b8:3b:5d:42:cf:72:
                    a9:f6:ca:37:b1:3c:36:90:5f:5a:22:92:fc:8c:32:
                    cb:3b:ea:8c:89:db:a1:b6:c4:16:e5:21:f7:d6:08:
                    30:f0:a1:72:c7:ab:ff:f2:a1:2e:51:da:25:39:38:
                    c7:92:9e:0a:57:7a:e2:b3:f6:44:45:a8:0a:29:dc:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:B8:17:D1:48:24:98:25:01:F6:DF:82:60:E8:96:AE:67:63:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:f2:70:ad:63:2e:7b:3d:b8:9d:06:c9:7d:b2:7a:8d:bc:
         2d:c8:28:60:87:49:d1:e6:ee:b6:b1:cd:f7:48:3a:36:62:40:
         e8:38:0c:3a:67:ad:11:7d:ef:f9:f5:15:e8:e0:41:74:fa:12:
         25:5a:2a:88:d6:58:e7:d4:d4:d6:eb:d5:cd:8d:7d:b4:f7:e2:
         05:7d:17:70:42:47:5d:68:80:ee:94:88:94:05:f8:69:b9:b5:
         91:b0:72:9e:a0:c3:30:2b:25:65:b2:97:a5:e5:54:fe:92:91:
         ef:2c:02:cd:ce:40:06:6e:4c:88:24:9c:28:7a:3e:68:d1:39:
         5c:51:d4:0b:79:cd:de:98:f7:9e:00:67:e9:6a:5e:15:91:0e:
         48:94:24:dd:01:42:9e:c1:d6:e9:3f:cb:76:66:40:c4:1f:5f:
         d0:35:54:20:4f:09:f2:4d:e4:b5:04:e2:8a:a8:17:a2:e0:a7:
         8f:6a:a1:2c:ba:7f:59:e0:b3:81:18:ce:04:00:24:e9:f7:e6:
         da:58:db:af:e9:20:88:37:c3:c6:19:d3:52:1e:bd:61:5f:b4:
         8c:7a:e6:32:eb:b3:88:e5:92:24:91:d0:02:16:9a:92:b1:b1:
         d4:ac:cd:38:68:ba:91:48:fb:d9:82:f9:47:9e:ef:7f:f0:bb:
         e4:9e:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:27 2025 by rpki-client