Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa
File:                     5ea233cc-40a0-39be-a806-47d7ac8801a3.roa (raw, json)
Hash identifier:          Aw/v59+SS3PF1p6OdL9P9FgjI4CbKoQZnSTyfEW/ZiU=
Subject key identifier:   9B:D7:84:EE:13:9A:BF:CE:D3:C9:7C:DC:9D:5E:46:B3:7C:64:1F:9D
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A58CAFDA3C34E1856054B94C0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     400097
IP address blocks:        2606:3d40:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fd:a3:c3:4e:18:56:05:4b:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=563d7525-7b5e-48a9-bc66-eeebb2126ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:6b:e7:28:78:1c:7e:f3:a2:aa:6e:2b:a6:
                    78:ae:9c:92:db:ba:f2:41:96:34:6f:8d:29:0f:7e:
                    7d:33:7f:36:62:53:13:0c:1a:44:54:af:b1:9a:04:
                    a9:51:f2:c0:cc:60:78:66:fe:19:f4:88:e3:40:57:
                    a4:4d:9d:51:52:5b:e1:9d:7a:aa:ba:38:44:ce:34:
                    66:2a:54:b2:e3:a0:7b:4c:fe:86:55:ca:f8:a4:50:
                    5f:ee:a0:a5:7a:e6:38:0e:8a:45:e1:31:e7:b1:67:
                    3a:a6:57:bf:d3:b7:1e:86:e7:0a:be:92:56:ea:c0:
                    96:c6:70:2b:4c:e1:73:9d:ac:b0:5d:b0:09:3d:4f:
                    60:af:3e:65:e7:63:f5:b3:b4:c8:f5:69:d3:ba:ac:
                    61:b4:f6:c2:c0:fd:48:68:34:d5:73:97:05:a9:e9:
                    df:b9:5d:7b:f2:27:2f:17:d5:fe:c3:95:15:7b:03:
                    d0:d0:e6:75:11:f8:3c:6d:7d:01:aa:18:ee:0f:7b:
                    c2:3e:dc:5f:70:ae:4d:d8:bc:00:de:4f:e4:56:97:
                    c4:85:8d:48:82:05:c7:ae:c9:16:49:5f:ac:fd:07:
                    07:f2:af:9c:8b:55:2c:19:2e:9c:01:b1:e8:cd:84:
                    03:19:0d:7d:fe:14:8f:94:b1:74:78:89:5b:40:e2:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:84:EE:13:9A:BF:CE:D3:C9:7C:DC:9D:5E:46:B3:7C:64:1F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5ea233cc-40a0-39be-a806-47d7ac8801a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:e7:3c:66:a9:6e:a6:20:af:1a:81:3d:b8:ad:ba:d8:45:
         eb:c0:0c:18:a1:0d:0d:7b:61:99:1c:98:43:9b:87:bc:a6:19:
         74:ac:ed:39:0d:7f:62:8a:41:e0:52:40:9a:a3:a9:c0:ce:3c:
         5a:b6:89:d5:95:4b:52:e7:38:06:15:56:b7:82:83:be:fa:43:
         6d:61:8b:d1:74:fa:d5:1a:00:c6:62:16:ac:51:b6:13:dc:90:
         6a:b9:42:22:25:d0:4d:52:4d:a6:45:90:94:09:e7:a6:07:cb:
         6d:0b:51:a2:31:07:8e:0a:78:79:87:aa:95:1e:a6:48:9d:a2:
         97:cd:5a:b8:80:b7:d9:3d:08:8c:70:89:19:93:19:d9:3d:b1:
         0d:70:24:c8:86:bf:bf:4f:57:1d:a4:6e:bd:97:dd:af:21:8b:
         b7:eb:61:8d:de:44:01:2d:ae:2f:39:c5:7f:f0:32:6d:7d:b0:
         81:b8:e2:ae:21:41:b2:f0:e1:59:5a:73:52:04:ab:32:54:40:
         a8:2c:12:0d:61:42:ef:e0:61:84:2a:ed:89:a4:68:9b:65:93:
         c3:94:d1:15:46:a5:b9:dd:54:a8:bf:9b:a6:f8:c8:36:09:b3:
         13:fb:65:22:11:df:6e:a6:56:8a:01:1e:84:a2:f8:f2:11:99:
         3c:93:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:36:15 2025 by rpki-client