Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa
File:                     aa1e9760-1e22-38ea-9430-d287417cba9b.roa (raw, json)
Hash identifier:          lRhbVvJtRQi/tRBRx+qqk/BG18SbnfZm4CeWYc8MUR8=
Subject key identifier:   9A:CB:F6:06:C0:F9:57:DE:8D:D6:C8:5F:3E:97:75:D0:46:9E:D2:03
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A5765CD2F46AB750C4075AB80
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     400097
IP address blocks:        2606:3d40:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:2f:46:ab:75:0c:40:75:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=11928228-9796-435a-8026-a5233b0b7a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:1a:a9:a0:a8:aa:f1:5c:a0:9a:1e:f8:09:
                    63:9a:6d:65:ed:25:cc:a8:7b:fb:cb:1c:24:ce:97:
                    2f:92:08:04:e3:a5:e7:3d:75:f4:7f:61:b6:c2:3b:
                    40:43:84:38:5a:f1:a1:e7:4b:3c:2e:d8:56:d4:8c:
                    83:a4:0d:f6:9b:77:43:ed:bb:61:b8:ba:ef:80:6f:
                    b3:6c:a7:47:38:a5:db:43:48:64:cc:27:c0:2d:e7:
                    fa:d4:e1:ae:2e:2e:c4:f2:d0:46:40:f3:52:a8:be:
                    47:fb:16:2f:35:0a:f8:12:ab:75:b3:b2:44:3d:e7:
                    f5:b2:d8:8a:21:d5:98:02:e0:b6:dc:83:31:d8:ee:
                    8f:7f:91:be:3d:f0:d0:0e:db:ed:49:10:a1:fc:e3:
                    50:ca:d0:4b:cd:1c:bf:6f:49:ba:45:a0:4e:9a:7a:
                    a8:8c:0b:33:3a:e0:0f:ea:24:04:e5:21:76:65:96:
                    fd:1c:ea:ae:c9:db:d1:bf:19:f4:ec:82:fb:8c:a4:
                    d6:c5:df:3f:ff:40:a9:fe:cd:4c:87:00:21:e5:08:
                    42:f8:8d:e5:79:0b:9c:07:06:d2:49:4c:a7:a1:a6:
                    ee:e0:93:4d:9b:c4:5d:62:3b:2a:ae:2f:e6:47:f3:
                    0e:50:11:3a:59:8a:30:6f:8d:f0:33:5d:cf:76:ac:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:F6:06:C0:F9:57:DE:8D:D6:C8:5F:3E:97:75:D0:46:9E:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:7e:d8:56:6f:c9:1c:45:a8:f5:bf:ab:fa:cc:aa:10:53:
         88:80:18:ce:82:38:25:c4:59:4f:fa:e6:e7:ed:3a:93:cb:11:
         8e:d9:a6:1e:17:d9:57:86:a5:57:1f:5f:39:11:50:8f:38:38:
         a8:42:80:77:68:d0:5b:c5:80:af:82:4a:54:11:d8:65:7d:16:
         12:97:3e:f4:ad:a3:8d:0b:ea:fc:32:ab:7c:b6:42:f4:b5:97:
         e2:21:fc:ed:b4:e8:9e:cb:b8:0c:b0:a3:b9:37:b6:e4:5b:10:
         20:f9:1f:0e:a0:c9:16:df:75:10:7f:a5:51:c9:09:1e:b7:e0:
         f1:8a:ab:17:ba:12:8a:c2:7a:3a:4d:d5:ef:08:77:cb:94:f4:
         4f:52:2b:c9:f8:75:8c:83:e4:00:3e:a4:73:c7:ea:20:c7:a1:
         f4:f0:0c:8c:9b:8b:16:5b:7f:be:2a:00:8f:e9:59:18:eb:17:
         ce:0e:6d:9f:35:81:ee:92:bc:1e:0c:9a:ac:99:e3:e9:7b:4f:
         b3:ec:5b:31:c9:f3:32:60:12:e3:9a:42:6f:4e:06:32:0b:a1:
         9a:1d:e5:a7:f1:58:bf:f4:ff:71:27:f6:29:27:4a:1c:75:b2:
         8a:42:1c:69:45:39:55:73:d9:f3:50:4b:65:f3:df:89:90:d0:
         66:d9:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:14:16 2025 by rpki-client