Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d119b819-9b8e-3a40-8a3e-d981e3843a37.roa
File:                     d119b819-9b8e-3a40-8a3e-d981e3843a37.roa (raw, json)
Hash identifier:          htoih6pglsbC+RRbgDdp+0/EEF2PzAFgXoOP08j5goA=
Subject key identifier:   51:6D:84:B9:85:58:11:D7:19:12:57:F1:7C:61:10:84:CC:14:30:BC
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584A5765CD11FB3751B9A3349ABE
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d119b819-9b8e-3a40-8a3e-d981e3843a37.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     400097
IP address blocks:        2606:3d40:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:11:fb:37:51:b9:a3:34:9a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=7c4343bb-6c9a-42b4-84aa-8c57d53f3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:ed:fa:1c:a4:07:71:28:93:93:18:b0:0e:
                    09:ca:e8:ba:97:d8:43:7c:9f:1a:4e:63:a2:65:95:
                    8d:94:47:67:0b:70:df:b9:58:f9:fe:02:8b:a9:9f:
                    7f:6c:82:b8:7b:ae:31:9e:b9:05:68:c1:72:03:e4:
                    40:ab:a1:1a:25:32:8a:f2:ea:35:5e:43:d2:1a:ac:
                    64:fb:3e:48:4a:22:cd:42:d7:09:db:e7:c6:a4:22:
                    c4:e7:2b:fc:8f:3b:f7:25:af:91:85:b8:91:03:39:
                    2d:21:96:e8:c7:33:2c:0d:2c:6d:e0:d2:fb:c7:8f:
                    ef:c6:b0:8d:f7:a4:96:44:28:c0:e1:8d:a6:40:bc:
                    a7:58:63:27:d5:3b:f2:9c:d8:e4:84:83:17:3d:38:
                    95:47:82:8a:f0:fc:31:ab:46:2a:f9:a5:71:06:84:
                    54:d1:c6:b5:38:74:d3:26:22:e2:b9:2f:ce:23:f2:
                    58:b1:71:5c:ff:b1:eb:f4:ed:e2:ca:88:7a:bd:3c:
                    a6:a6:d6:f7:ff:ae:52:18:62:cb:2f:dc:dc:23:cd:
                    57:0e:5c:17:f1:4a:98:ad:a7:bd:3b:3c:7a:74:a5:
                    85:d7:5f:4a:de:85:ba:31:e0:67:4c:76:28:2e:51:
                    9e:2d:53:b1:a0:70:52:06:9d:27:42:02:d5:28:cd:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:84:B9:85:58:11:D7:19:12:57:F1:7C:61:10:84:CC:14:30:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d119b819-9b8e-3a40-8a3e-d981e3843a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:f6:9f:79:a6:77:c0:7f:d6:66:09:85:3f:8c:7e:b5:27:
         ed:6f:41:7e:d0:4e:9a:95:b2:ba:25:6c:5e:3c:9c:9b:d1:c1:
         70:05:0d:09:f0:fc:6b:5b:bf:9b:5d:fb:54:c3:46:a5:f3:65:
         24:e1:b6:1a:5a:d5:a2:68:92:b3:0d:7d:92:19:3b:ec:d2:5f:
         2d:ec:f5:3c:87:8a:dd:f6:b7:99:29:21:cb:4e:df:71:f2:7e:
         be:91:d0:06:7b:d6:1f:d0:a4:65:75:34:58:05:a5:eb:9a:bb:
         ed:b3:af:9c:1b:09:7c:de:b0:01:a5:71:5e:7b:a5:01:81:e4:
         25:7b:0d:47:e3:cc:ce:d4:a7:fc:18:ba:06:22:27:a1:de:6a:
         61:17:83:d6:5c:5f:ee:d9:15:eb:0b:31:c2:1f:c0:eb:40:96:
         b4:4b:11:2f:ca:09:3c:d9:7f:90:52:4f:6c:9d:cb:ca:ed:ad:
         64:17:c8:b1:a1:d7:c1:eb:4c:b6:b3:0d:bc:73:e7:22:d1:af:
         98:9c:6c:54:f0:44:ad:ab:e5:25:71:16:96:d8:25:e0:02:3e:
         76:82:2c:09:f0:f1:c2:e5:61:ef:99:cf:ee:79:81:39:94:ca:
         9f:e4:7c:9f:ce:54:d4:29:c2:27:c3:48:f3:c0:a6:7c:6a:38:
         5e:8b:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:10:26 2025 by rpki-client