Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa
File:                     35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa (raw, json)
Hash identifier:          Ptuzoi3/LQsTJZL/14arA7Uay5RmQS62QC+PsdSYsZ8=
Subject key identifier:   37:18:F4:75:42:4A:5E:C9:AD:6C:BB:FD:3A:FF:D1:B8:72:69:20:C0
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584A629092695932EEBA9B496100
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1000::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:92:69:59:32:ee:ba:9b:49:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=035600c7-693e-4735-88d5-d27ac33ae2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:98:35:ef:dc:dc:3b:db:c4:41:eb:20:40:
                    61:67:95:2a:23:48:c3:2a:85:16:4c:9a:50:73:7e:
                    97:f6:a4:4c:1d:a0:e7:83:52:66:5b:4c:3d:8e:c3:
                    e4:b3:41:93:8e:93:3a:82:9c:bb:6c:44:ee:f8:8b:
                    bb:72:dc:d3:4d:9e:fd:d7:8f:e2:d6:4f:64:11:f4:
                    cc:91:87:4a:36:5b:e5:65:30:7f:32:57:8a:e5:af:
                    db:ce:06:96:6b:27:10:cb:69:6d:14:ce:90:86:52:
                    d7:b6:55:b1:7d:e1:8b:77:0f:ed:42:e3:1b:89:99:
                    37:9a:1e:c0:d0:14:ed:72:b2:54:6a:e8:fe:42:a3:
                    19:11:8d:af:cc:c0:1a:4e:35:dc:2e:25:59:5e:d9:
                    22:37:e1:a5:99:a5:99:90:0a:0c:c8:84:bf:77:92:
                    8d:94:c5:86:c4:6f:82:e4:02:3e:35:c5:fb:5c:7a:
                    c9:2a:22:59:09:47:ca:50:8b:4d:ac:a3:21:ef:60:
                    95:02:fa:e1:53:93:2a:54:8c:a1:0e:a1:68:d1:f9:
                    3d:c3:9d:5a:0e:60:45:ba:83:c7:29:8a:24:8e:83:
                    eb:a1:18:26:7b:a0:81:c6:a9:30:62:f4:f5:29:31:
                    b1:3e:4c:e3:af:fa:6a:f8:34:16:45:99:bb:d9:68:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:F4:75:42:4A:5E:C9:AD:6C:BB:FD:3A:FF:D1:B8:72:69:20:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/35aa9498-4065-364f-a0b8-2aab0ab04cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:2f:38:6d:f2:0e:a1:ab:be:eb:f8:34:45:4f:4e:6a:d0:
         67:2e:ba:c1:5f:a5:01:94:9a:0c:7e:07:4e:4d:31:02:a8:3b:
         62:d2:0a:8f:d9:03:54:f5:01:9b:0a:3d:7f:11:f4:aa:db:c9:
         48:6c:2e:98:54:f1:c1:5b:d8:5e:7d:f6:88:a5:8c:8a:79:94:
         bd:cd:fb:39:de:0b:a3:11:7b:3c:02:66:ab:01:79:2d:23:67:
         74:24:67:cb:1d:52:e8:d3:fa:18:84:5b:e0:86:30:49:b2:88:
         85:aa:95:e9:74:1d:c7:f0:2c:e3:0f:67:bf:89:e9:ed:25:40:
         33:7b:eb:b5:fd:96:e3:e6:fb:96:c5:06:51:71:57:ec:a4:b0:
         39:ad:e3:1a:87:01:be:04:47:8d:3a:e2:3f:12:ef:34:33:60:
         7a:b0:44:5a:4f:1f:56:8e:ce:6f:67:62:bf:ff:ac:16:30:7d:
         cc:9d:51:cd:27:72:9f:aa:30:5d:66:ff:b9:7c:ed:3d:f1:5d:
         72:92:73:14:b2:da:38:4d:f1:7c:81:1a:e4:43:83:ef:12:81:
         f9:ab:fc:4b:cc:33:3c:39:b7:2a:13:3a:cf:ae:42:d7:69:ed:
         e5:2b:4d:78:62:a8:8e:96:88:91:82:cb:6c:ce:9d:e4:85:5f:
         06:eb:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:46:47 2025 by rpki-client