Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/2b2fc832-5cfa-30fb-b9d6-f6c212fed89b.roa
File:                     2b2fc832-5cfa-30fb-b9d6-f6c212fed89b.roa (raw, json)
Hash identifier:          maDTcfmd8nKSi/Jl52Q/yxLc9B9azVvLPPYNIVlWWz4=
Subject key identifier:   6C:DF:30:5D:D7:A8:DE:E1:63:A9:EA:DD:23:BB:77:ED:6A:73:B0:89
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A5765C19FF34AB237C70ED480
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/2b2fc832-5cfa-30fb-b9d6-f6c212fed89b.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     400097
IP address blocks:        2606:3d40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c1:9f:f3:4a:b2:37:c7:0e:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=87647b5b-99b8-4f5e-9efa-93ff55ec4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:71:b2:1d:eb:f2:72:27:5f:e2:3a:7c:e3:
                    67:34:92:99:99:5b:60:f8:b8:ab:6d:e6:f2:1f:e0:
                    c4:40:c1:ed:50:ff:03:4b:f7:02:5b:ae:87:21:55:
                    7e:23:57:e2:e8:ed:da:a7:41:a7:1d:84:d3:78:eb:
                    66:db:a9:b1:43:e6:2f:34:69:5e:41:cd:b9:b0:67:
                    61:e2:fa:85:28:24:0e:e6:b7:ef:3b:79:84:4f:99:
                    5b:1c:fd:79:76:94:64:ab:c3:49:b9:0e:04:ce:96:
                    66:3e:bc:2c:f6:7b:b8:94:77:4c:4b:26:e4:c4:30:
                    b5:7d:f0:08:62:6a:2d:b2:da:33:1b:af:3d:a3:0f:
                    c4:e8:90:b0:68:f8:ae:43:92:d1:11:e4:c2:03:c2:
                    a4:ac:10:6a:cc:3d:c1:74:90:1a:4a:bf:33:d6:f2:
                    cf:4d:de:c8:f2:88:6d:20:ac:81:74:0b:21:d1:0e:
                    41:6c:f8:0d:70:3a:48:54:06:6f:1a:df:50:6c:bd:
                    92:67:40:75:cc:aa:71:0f:54:9a:dd:59:a3:2a:d0:
                    9d:1d:98:9d:5b:88:65:0e:17:1b:96:76:a7:bd:ef:
                    49:c0:4f:c8:d4:4a:b5:47:c6:f2:d5:ae:81:54:cc:
                    77:30:1c:e7:01:73:b2:c1:60:65:e6:00:a2:eb:53:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:30:5D:D7:A8:DE:E1:63:A9:EA:DD:23:BB:77:ED:6A:73:B0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/2b2fc832-5cfa-30fb-b9d6-f6c212fed89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6a:71:8c:71:c2:8d:df:4d:c5:29:2d:51:67:71:01:4a:04:
         ae:6e:65:ff:14:51:98:34:36:c7:48:b9:b7:df:13:32:5e:8a:
         4b:bc:3a:c6:c2:a3:69:97:24:51:51:ed:aa:ad:fb:56:cc:48:
         2b:91:42:c0:7b:04:1c:4e:d0:56:bb:77:00:08:97:6a:b6:59:
         17:32:58:d8:76:49:58:dc:c5:8f:e2:86:ee:f6:17:ab:83:6f:
         96:e5:a6:89:01:c0:bf:38:59:e5:da:d5:b5:a2:8e:11:94:73:
         af:04:4d:77:fb:b3:3b:9c:20:f3:96:ff:40:ff:d9:7f:82:3a:
         38:d5:18:5b:3b:45:c0:79:57:6d:eb:da:14:e7:94:3a:09:77:
         a3:75:f0:31:b7:fc:32:64:3c:89:04:81:80:cc:51:45:ff:b5:
         8a:d9:4a:af:dc:25:d5:79:3b:33:36:8d:0c:2f:23:f0:4a:80:
         91:9f:34:27:83:77:8e:c8:a8:75:b4:6c:72:de:cc:34:8d:34:
         13:86:c1:a5:46:d9:4b:f1:ad:9b:09:4d:f9:14:2b:d8:92:7c:
         28:61:07:46:ef:7e:f9:e3:01:92:2d:82:be:0b:c6:2c:1a:5d:
         12:03:79:0a:bc:7a:b0:a1:9a:4e:72:cb:7e:58:0d:e1:d9:b4:
         a9:20:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:14:13 2025 by rpki-client