Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa
File:                     a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa (raw, json)
Hash identifier:          giOOQGCDa7gzjWdLDQSaUMwk1IbrRp0SZ2FXfLGXDdw=
Subject key identifier:   12:C2:61:B8:A3:80:F2:C7:70:F6:BB:A0:A3:87:06:F3:7F:17:9E:A1
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A5765CD201393B1AB4E4F5570
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     400097
IP address blocks:        2606:3d40:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:20:13:93:b1:ab:4e:4f:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=6e29c9e7-c90a-43f6-af3d-43bb708fc040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:f1:cd:27:e8:e8:48:b9:17:db:e0:3e:03:
                    75:3c:bf:f6:b4:8d:50:21:3e:2b:40:7a:37:90:b0:
                    1f:72:c4:93:4c:ac:76:f9:ee:39:e9:6d:b7:d6:50:
                    27:15:25:53:dd:bf:a8:b1:9d:56:75:61:da:ab:d3:
                    25:40:a8:1d:f4:7f:18:3a:df:c0:9d:f9:77:20:37:
                    23:96:09:95:88:3b:65:0c:82:97:be:f1:aa:f3:de:
                    43:94:fd:f9:a8:f9:5f:5d:db:6c:dd:9e:2e:03:c4:
                    c3:56:3f:42:67:d4:14:98:4a:ad:85:58:c0:b6:de:
                    bc:de:3f:4a:53:44:d1:77:74:22:11:cb:3d:c3:f6:
                    94:89:9c:29:9f:25:7b:ca:6a:b5:a1:00:ce:02:f6:
                    cb:4f:0d:29:b5:20:56:92:31:f8:cd:2d:cb:08:d9:
                    35:45:28:e3:4c:07:e6:3a:29:aa:84:b4:7a:64:fb:
                    0c:d2:a3:da:f4:b8:94:26:03:be:79:50:86:42:a9:
                    aa:24:2b:eb:af:4d:28:41:44:5c:f7:51:37:fa:3b:
                    c6:2d:0a:64:01:50:8c:98:5a:8e:25:d9:12:2e:df:
                    22:1a:af:ca:c8:54:c9:49:aa:19:71:cd:c9:0e:aa:
                    24:ef:33:1f:4b:89:40:83:ec:40:ac:8e:e3:5a:ff:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:61:B8:A3:80:F2:C7:70:F6:BB:A0:A3:87:06:F3:7F:17:9E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f2:ed:67:97:28:ee:37:f2:79:09:34:75:8c:b4:f8:c8:b6:
         c1:03:9e:17:dd:39:38:ba:64:9a:4a:91:39:82:2e:c9:2b:fe:
         1b:23:84:12:35:7e:87:fa:9c:d3:69:44:9a:66:43:a0:28:8f:
         b6:c9:2a:ab:96:22:5b:20:92:ec:6c:fc:cb:85:39:e6:2b:9d:
         22:c0:41:80:d1:e9:01:07:31:0e:18:77:0a:d2:63:da:30:e5:
         46:ed:8c:82:5e:07:3b:c6:66:e2:f6:46:2b:18:0c:13:53:de:
         96:2a:71:60:e6:a4:bd:38:92:46:67:77:40:22:d8:9f:55:0e:
         ed:a9:79:70:ba:62:c6:82:4c:45:c1:05:b1:f8:93:35:34:c4:
         ae:05:e6:3c:2b:92:d5:db:a9:47:37:9e:08:ec:5d:cc:b9:ba:
         09:3e:80:ce:9d:ad:24:5c:ba:82:64:47:d2:fa:bf:8d:3a:f2:
         b0:7f:ea:ff:53:8b:c0:7d:12:76:60:1a:59:87:7e:78:91:f7:
         37:d4:ff:a6:b6:92:bf:11:2c:19:38:e5:0b:1b:c1:82:d6:79:
         5f:00:df:7a:49:44:d9:43:fd:0b:27:c7:9f:93:9e:4c:d0:13:
         f2:27:cc:24:96:19:ef:17:f9:db:70:f5:ea:ce:f4:e9:14:11:
         7f:98:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:02:40 2025 by rpki-client