Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b769af2-f5db-37eb-a0ec-0b0a834ce151.roa
File:                     8b769af2-f5db-37eb-a0ec-0b0a834ce151.roa (raw, json)
Hash identifier:          bgIj4ndvkoYVKZB1hhZituXBE5Ah30oF6xiV61NjYW0=
Subject key identifier:   14:64:A1:85:69:50:D0:13:9E:5F:5C:A9:94:11:A5:00:91:15:98:CE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B62155D21176A771ED00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b769af2-f5db-37eb-a0ec-0b0a834ce151.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:9680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b6:21:55:d2:11:76:a7:71:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6a4dea68-b61a-4098-8520-f7b582fa9ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:78:0e:0f:61:51:eb:1f:d4:88:7a:2e:b2:
                    3a:58:36:bb:ad:21:c9:56:3e:8e:62:cf:c8:66:01:
                    f0:13:c4:ba:2a:83:4b:fc:ef:16:30:a3:29:3d:d4:
                    dc:9b:cb:5f:80:88:30:4f:f5:51:7e:96:42:b3:ac:
                    df:7c:45:45:97:cd:5e:a6:4f:bc:29:63:6b:e4:f9:
                    27:4f:2b:5c:50:36:c0:e8:49:b8:fb:22:11:6f:82:
                    b6:e8:8e:13:ce:30:d3:7d:53:de:44:f6:ce:be:2d:
                    78:02:ad:b7:1a:92:77:34:0e:d9:5f:0d:f5:b3:c0:
                    b5:b9:fb:70:94:68:5c:e8:53:a8:7a:63:22:15:b1:
                    8d:73:5d:48:b9:fe:c8:af:d3:7e:16:9a:67:af:06:
                    e5:59:c5:48:ad:10:4d:8d:53:4f:c0:41:15:9e:1e:
                    47:fe:d4:06:c5:b0:19:25:e0:01:81:fb:4d:e1:b3:
                    cc:4f:ea:26:68:40:25:1c:a3:5b:23:2b:e5:d6:39:
                    1f:c1:7a:01:3d:c2:d1:f6:0b:4e:f6:f3:8a:0a:9b:
                    eb:0f:c8:60:b6:ac:34:ab:7d:06:cc:3d:1c:1f:88:
                    db:2c:26:4c:9b:84:b0:bc:19:07:94:67:e8:fd:96:
                    52:68:cf:3e:59:e9:10:a9:2b:9e:a4:f7:d1:24:7c:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:A1:85:69:50:D0:13:9E:5F:5C:A9:94:11:A5:00:91:15:98:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b769af2-f5db-37eb-a0ec-0b0a834ce151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:86:71:b1:27:5c:0a:4c:35:3e:1c:bf:09:00:57:0a:e5:
         5a:60:06:f7:93:b1:fb:36:86:64:54:06:52:fd:55:d2:43:58:
         b9:db:9e:d9:2b:2a:c4:6e:f5:f6:ed:59:1b:9e:bf:db:53:01:
         b6:5b:bf:a1:3a:26:5f:b5:ae:40:9d:87:ab:a2:bb:5b:52:17:
         03:dc:3e:6a:24:fa:29:f6:a2:24:b4:0d:ba:f4:eb:7c:55:0f:
         04:f1:d1:06:42:c9:a0:57:7d:9c:19:c3:3c:5f:a3:22:98:66:
         f8:96:09:85:38:61:2a:48:8d:80:66:27:ed:35:1d:e7:2b:10:
         2b:9c:e7:39:91:06:0b:4a:92:2b:b4:f6:0f:41:c6:4a:98:1d:
         d8:7a:73:73:6d:c2:56:56:c0:08:b6:41:ba:43:bd:8e:c6:9c:
         7d:3f:4c:93:12:dd:5c:b0:31:54:98:a7:55:f6:ef:67:6e:34:
         21:b6:09:8e:d5:9d:8d:9c:bf:ab:27:6c:2b:5c:ca:ca:17:86:
         03:f8:e5:46:b6:af:d0:ec:94:ab:6c:fd:7e:3e:86:71:d9:33:
         84:24:ea:28:40:aa:5a:02:b4:ab:11:69:55:17:02:2b:3e:3f:
         5b:fe:df:a1:be:f1:f0:0a:1e:a3:4b:e4:7e:88:80:bc:3a:77:
         45:b5:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:27:11 2025 by rpki-client