Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa
File:                     06deb67f-5f98-351b-8719-f93f9de6c78c.roa (raw, json)
Hash identifier:          /veaOzbnyz8090bBdEXFV6qzrh18/606wWqH4l7I9aw=
Subject key identifier:   D2:40:B0:36:04:00:0D:C5:FF:E4:DA:B9:74:09:EC:D8:2E:A3:FA:FB
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A58CAFDB74745D185CFBE9940
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     400097
IP address blocks:        2606:3d40:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fd:b7:47:45:d1:85:cf:be:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=aab81b01-fe4e-48e4-beb5-b51667087b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:15:73:93:1f:57:d5:8f:51:81:89:65:0c:
                    af:76:f4:8a:6c:ac:0f:5b:1a:7d:e8:f0:7d:10:03:
                    d0:3d:a2:1e:e6:36:5f:85:17:56:77:6c:3f:1b:f4:
                    99:2a:c5:9f:3d:40:e5:1f:eb:63:1c:7d:24:c5:ff:
                    64:49:2b:a4:f1:bc:ec:a7:2f:b6:c8:16:d2:0c:ae:
                    39:33:74:03:81:af:c0:0a:b7:3b:89:53:ef:ee:ba:
                    5d:47:cb:38:f3:af:02:d9:c1:1a:46:50:e5:55:04:
                    c6:db:15:b8:7d:7a:b8:1d:b1:3e:64:9c:c6:26:eb:
                    fa:93:dd:9e:6e:9a:bd:5c:99:76:71:d6:26:59:14:
                    af:47:10:d3:f2:e7:92:b7:f0:77:54:0b:bf:51:c0:
                    03:c7:73:89:81:95:89:2d:b7:26:2c:85:48:2b:31:
                    dc:6e:52:b1:a3:1b:16:e4:cc:54:fd:6f:7a:69:b1:
                    74:37:d7:ea:50:8a:16:90:2b:e5:14:ff:e4:ae:12:
                    8e:e7:e0:9b:8d:e4:85:53:85:54:af:b6:cc:fd:88:
                    5f:3d:5d:57:37:05:e4:7c:4e:73:8b:5f:89:7d:6f:
                    d5:e5:28:1e:cd:d9:d8:6d:16:41:7f:42:0e:0c:e7:
                    fe:5b:17:41:08:3c:4e:51:86:08:9e:96:c2:e4:3f:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:40:B0:36:04:00:0D:C5:FF:E4:DA:B9:74:09:EC:D8:2E:A3:FA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:ea:fa:a6:f2:60:d7:65:db:6c:e8:73:be:f9:62:ea:9c:
         d1:ba:1b:2a:81:db:42:e3:5c:13:08:0f:79:01:ee:69:e0:cf:
         d3:e7:b1:01:34:19:0b:3a:a9:71:61:09:50:75:44:ee:6a:d2:
         a4:c3:32:d9:74:a5:24:47:29:06:9e:71:c3:c4:32:26:7c:b0:
         34:d5:0a:83:e1:6d:b4:48:db:f4:4a:16:62:07:40:f3:04:43:
         94:fe:81:be:28:f9:7a:97:e4:ff:72:18:96:35:da:6d:f9:49:
         59:07:5a:7a:4d:a7:67:5c:ba:b8:29:70:c7:12:a9:bd:84:22:
         bc:ce:d9:34:9f:6b:d6:2b:1b:2d:1a:a2:fc:1b:ab:ed:e6:63:
         5e:d1:8b:75:7b:e2:7a:dd:a0:50:55:63:b4:24:a0:74:85:b2:
         b5:07:9a:90:13:e4:68:fe:d8:86:0e:3e:98:93:44:9e:e9:bb:
         62:93:e1:09:35:e9:5f:61:88:18:60:d6:63:10:f5:ac:7f:40:
         ed:b6:ca:09:88:f7:ba:2c:03:95:53:a7:01:cd:3f:72:52:5c:
         fe:f0:b3:7f:43:e4:3b:9e:50:cd:d5:29:d6:b1:8d:19:b8:a1:
         37:0a:a6:11:a7:c4:42:7d:c0:86:83:c6:e6:81:14:91:f5:27:
         52:4d:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:14:07 2025 by rpki-client