Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa
File:                     3205637f-d74b-357d-9491-ff132132e764.roa (raw, json)
Hash identifier:          LlULcaq91RwXH16qNg63AyAg9TcHhRtcdWLm68l2kks=
Subject key identifier:   24:7A:BD:2E:A9:A3:1B:08:84:DF:84:2F:EA:F4:D9:16:2D:18:21:3C
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A58CAFDEFA844112EDAB33840
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     400097
IP address blocks:        2606:3d40:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fd:ef:a8:44:11:2e:da:b3:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=8b03261d-fb0d-470f-ae53-85a9817b75bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:d7:af:81:99:8d:d9:28:bd:77:12:e8:d4:
                    a9:86:2c:5b:d2:22:29:fa:13:27:f2:e9:dc:c6:0d:
                    df:12:8f:23:db:d9:c0:80:65:19:58:5e:99:97:3f:
                    6f:5e:63:cc:ab:6e:97:f1:b8:be:55:e3:11:1e:85:
                    3d:20:d6:1f:1f:9b:bf:a6:ba:77:e6:2b:02:f4:f4:
                    d5:07:7d:b0:a9:b8:87:2b:b2:2a:1b:14:5b:b9:55:
                    d0:67:3f:c7:72:3f:3c:da:da:74:51:f2:1d:7c:5c:
                    51:1e:bb:69:0b:62:69:cf:4e:06:ee:20:9a:09:51:
                    05:fe:b7:bd:8c:18:a7:64:81:9e:40:45:ed:51:81:
                    fc:aa:45:7f:55:be:92:50:f2:e6:75:75:7e:3d:f5:
                    49:eb:fd:f2:a5:97:ad:10:e0:75:88:9f:56:88:b5:
                    5d:99:6f:07:c1:27:c4:68:23:78:83:1e:6b:30:4e:
                    03:85:ce:e2:de:4f:9e:9e:e6:72:6a:44:a4:fa:9e:
                    56:29:10:ac:6a:f2:d1:14:00:56:a5:13:4a:a2:cb:
                    86:fd:4f:85:ea:e9:35:b8:39:50:a5:8b:73:7c:5a:
                    2d:79:cd:14:7d:bb:83:51:c5:7c:a0:b5:89:07:82:
                    4e:ce:ca:76:4c:21:e1:3b:d7:3b:18:61:ae:71:c9:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7A:BD:2E:A9:A3:1B:08:84:DF:84:2F:EA:F4:D9:16:2D:18:21:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:ef:24:36:78:21:42:97:fc:8b:ca:36:65:38:56:b7:46:
         98:c1:32:1c:06:ed:55:b2:fc:12:ee:ee:5c:be:d5:53:da:f1:
         92:08:5f:00:2d:08:10:fc:f5:9b:4f:ff:66:7f:38:e7:ab:d0:
         5d:9f:49:1a:e8:8c:29:9d:99:a2:91:9f:e5:ef:1c:c9:9c:eb:
         ff:25:a2:bf:90:3b:86:e7:11:6f:27:37:c6:4b:93:82:6d:fa:
         cf:a0:fb:75:9b:73:2b:f1:f0:f1:47:ce:c6:46:49:be:29:67:
         e4:87:0c:f9:43:50:97:e3:43:a7:42:67:54:86:59:94:74:43:
         3f:f4:cd:ba:b3:a7:2c:25:14:e5:af:08:2f:cc:e8:a1:c1:25:
         98:b0:07:be:74:60:a0:78:0b:14:93:6f:e6:c5:b5:e6:44:30:
         30:86:a3:82:17:cb:9f:37:74:ec:ab:15:7d:7b:2d:04:b3:7e:
         84:61:b6:1c:5f:15:41:0c:9b:58:bf:21:40:87:5d:68:b2:e4:
         7a:e0:41:43:ef:42:70:d9:8e:ba:91:89:2b:0c:1f:4f:90:08:
         1e:1d:68:b4:40:d3:33:63:99:4b:8c:ca:8b:ff:b9:bd:fc:49:
         39:4c:a8:25:58:e2:27:08:42:fe:35:90:92:84:7a:75:52:91:
         92:24:6a:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpYyv3vqEQRLtqzOEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
OGIwMzI2MWQtZmIwZC00NzBmLWFlNTMtODVhOTgxN2I3NWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNrXr4GZjdkovXcS6NSphixb0iIp+hMn8unc
xg3fEo8j29nAgGUZWF6Zlz9vXmPMq26X8bi+VeMRHoU9INYfH5u/prp35isC9PTV
B32wqbiHK7IqGxRbuVXQZz/Hcj882tp0UfIdfFxRHrtpC2Jpz04G7iCaCVEF/re9
jBinZIGeQEXtUYH8qkV/Vb6SUPLmdXV+PfVJ6/3ypZetEOB1iJ9WiLVdmW8HwSfE
aCN4gx5rME4Dhc7i3k+enuZyakSk+p5WKRCsavLRFABWpRNKosuG/U+F6uk1uDlQ
pYtzfFotec0UfbuDUcV8oLWJB4JOzsp2TCHhO9c7GGGuccl1xQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCR6vS6poxsIhN+EL+r02RYtGCE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMzIwNTYzN2YtZDc0Yi0z
NTdkLTk0OTEtZmYxMzIxMzJlNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACl67yQ2eCFCl/yLyjZlOFa3RpjBMhwG7VWy/BLu7ly+1VPa8ZII
XwAtCBD89ZtP/2Z/OOer0F2fSRrojCmdmaKRn+XvHMmc6/8lor+QO4bnEW8nN8ZL
k4Jt+s+g+3Wbcyvx8PFHzsZGSb4pZ+SHDPlDUJfjQ6dCZ1SGWZR0Qz/0zbqzpywl
FOWvCC/M6KHBJZiwB750YKB4CxSTb+bFteZEMDCGo4IXy583dOyrFX17LQSzfoRh
thxfFUEMm1i/IUCHXWiy5HrgQUPvQnDZjrqRiSsMH0+QCB4daLRA0zNjmUuMyov/
ub38STlMqCVY4icIQv41kJKEenVSkZIkahs=
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:36:13 2025 by rpki-client