Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa
File:                     80accf89-89c6-338c-b9b9-82508a0a0804.roa (raw, json)
Hash identifier:          9leCl5Jg+m6weV5eBGcS+kr0BKfuJWH6Y1UhmbcjyJw=
Subject key identifier:   EC:FF:D6:C6:E9:8A:AF:16:FD:EB:CB:AF:3E:33:19:09:2C:F0:2C:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AC7AF85EE13B2E07DB31D6100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa
Signing time:             Thu 07 Aug 2025 18:20:17 +0000
ROA not before:           Thu 07 Aug 2025 18:20:17 +0000
ROA not after:            Wed 05 Nov 2025 19:20:17 +0000
asID:                     30036
IP address blocks:        2604:2d81:1a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:af:85:ee:13:b2:e0:7d:b3:1d:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  7 18:20:17 2025 GMT
            Not After : Nov  5 19:20:17 2025 GMT
        Subject: CN=f7a1d124-cbc3-415a-a98c-68721c3a5397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:ca:c3:26:04:51:61:0e:13:68:80:9f:cc:
                    be:5a:d7:e6:3e:a4:7d:f9:be:9c:a5:5e:2d:a4:29:
                    ec:53:7b:01:8a:fd:e0:74:b6:a8:0d:14:be:4a:7c:
                    eb:fa:e8:d8:61:77:3f:e9:e9:d5:af:3f:89:89:ce:
                    72:b9:64:3f:c0:9d:e3:38:e7:74:9b:1e:e5:1d:bc:
                    d2:0f:92:8f:66:9e:e8:7a:11:cb:4a:45:6d:a4:71:
                    f7:70:6b:97:78:03:8e:50:52:63:2a:f3:79:61:2d:
                    8d:4d:c7:6d:11:8d:eb:f1:28:54:eb:4b:71:f6:32:
                    df:16:7b:90:17:d6:f2:95:bd:e2:0f:7d:68:83:e7:
                    d7:f4:25:7d:31:1d:5f:3e:c6:0d:75:94:44:27:34:
                    16:37:ea:96:25:47:2c:c8:8c:a7:88:d6:db:1b:e8:
                    2b:6f:9e:ad:b5:90:32:2a:07:4d:0a:88:42:85:70:
                    d4:30:37:b3:37:92:31:b3:64:3b:74:45:13:7a:9a:
                    b9:10:37:17:05:fd:98:fa:b4:2a:5e:82:f9:3f:19:
                    0a:1d:e2:67:52:ca:27:9f:94:d6:e0:08:53:3f:b3:
                    93:99:d3:b9:68:87:79:e4:be:ac:02:91:b9:3b:ad:
                    32:3d:2c:73:cd:1c:89:f2:cc:8f:92:fa:ec:c4:77:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:D6:C6:E9:8A:AF:16:FD:EB:CB:AF:3E:33:19:09:2C:F0:2C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:88:e4:b3:de:e6:62:b4:98:4b:75:aa:ea:83:f7:a6:fa:
         e9:e5:c6:d0:72:ef:85:40:a6:4a:5e:13:a2:a8:42:f6:04:ca:
         c1:ec:da:00:7f:1c:fd:2e:ba:08:3f:ef:49:60:c7:aa:e7:94:
         d3:1c:68:ed:14:09:0b:48:87:f2:a5:8f:94:8f:05:03:19:e3:
         71:bf:26:18:13:03:49:4c:a7:d9:07:56:24:a3:cc:c3:47:e4:
         a9:fb:77:43:16:1a:86:0e:1c:9c:48:8d:d4:c8:2e:db:0a:9f:
         0d:a1:e7:30:43:64:0f:a5:1b:7f:cc:1c:60:cd:73:c8:18:1a:
         1a:32:7a:81:fc:91:bd:99:33:08:7e:c0:04:9a:73:ea:25:b2:
         18:cf:a4:69:9c:c3:84:6b:2d:58:0d:70:6c:66:6c:53:1c:0c:
         f4:52:71:84:01:a0:b2:60:36:2b:5d:82:ce:5b:57:fc:d6:58:
         6e:52:46:0c:fb:c5:c4:c6:3d:a5:37:69:fd:07:f7:fa:12:86:
         38:3c:1d:50:1f:bb:3c:59:b2:cf:a3:12:09:86:24:24:0b:fe:
         09:6e:c2:ac:31:7a:b4:25:45:8f:53:55:02:e3:36:3d:1e:e6:
         55:66:c1:d2:13:02:e1:9e:e7:0d:87:91:56:4d:3a:b6:1f:cc:
         1d:75:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:31 2025 by rpki-client