Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
File:                     39a9e277-40a2-31d8-afff-e586f0041303.roa (raw, json)
Hash identifier:          LOQgu/knAYteC6+8y8AQMEmiq8A3HTS4SCew2UdQbOk=
Subject key identifier:   3C:84:7F:18:E0:0A:89:3D:C5:1F:A0:10:60:55:40:AF:9A:C0:27:CD
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858499AF48B8097B98A8BE09B6600
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     400097
IP address blocks:        2606:3d40:3403::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8b:80:97:b9:8a:8b:e0:9b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=d004a8d9-2602-4da3-aeb6-7e85377cd6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:e2:fb:6c:0d:95:b8:71:ca:07:cc:71:d4:
                    83:d4:c6:a4:95:a7:73:18:40:4b:0d:4d:5d:f6:90:
                    fd:b5:da:c7:e7:a3:68:a3:51:2e:35:0e:24:4c:04:
                    dc:72:a5:cf:20:7c:97:fc:f3:ef:cd:d6:96:7a:82:
                    6f:d3:f6:71:d4:d5:27:bd:a1:c8:af:76:1a:49:ea:
                    81:c6:70:ac:6d:79:99:dc:91:9a:a2:2b:79:74:bd:
                    a0:24:ca:9e:55:ae:53:15:b5:09:eb:f5:39:2e:67:
                    c8:a0:36:2c:73:09:0c:b9:7f:b2:18:66:a9:26:4c:
                    b1:0a:11:45:89:0c:9e:3a:98:88:6d:68:de:53:22:
                    88:be:0a:34:90:72:d5:1d:bb:ac:fa:bf:4d:1c:6f:
                    bb:46:a5:c1:cf:d2:88:46:c4:ea:97:89:95:5e:53:
                    10:3f:e2:08:d4:66:36:36:5d:34:c1:08:27:43:c6:
                    87:7d:54:04:a8:41:8e:32:89:41:c0:63:35:1a:35:
                    13:ca:84:6e:1e:ac:fe:9a:16:99:13:b6:fe:19:b8:
                    98:6c:7a:bb:2e:25:d5:2b:19:de:0e:94:c9:d5:74:
                    3b:c0:4a:b6:0a:e9:d6:f0:03:d8:96:d5:c4:04:42:
                    a8:03:54:60:a4:dc:32:43:29:3d:ff:81:b1:12:df:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:84:7F:18:E0:0A:89:3D:C5:1F:A0:10:60:55:40:AF:9A:C0:27:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3403::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:68:85:c4:3a:10:5a:fc:fa:d7:87:29:7f:44:af:2d:f2:
         6b:4e:fa:5c:55:75:4e:9b:21:5f:3a:30:2c:f4:81:9c:6c:5f:
         e9:1d:41:73:f5:f1:c1:f9:e2:87:3a:01:bf:34:9d:16:c2:7d:
         84:8b:8e:61:be:0e:32:13:35:ed:49:97:7b:b9:f6:73:1e:25:
         3e:32:5f:32:97:1a:60:4b:7d:9d:ad:90:e3:eb:26:75:c1:07:
         fb:cb:f5:3a:e5:f9:76:88:cb:f3:b3:9d:92:63:48:57:36:bd:
         cf:6b:46:14:3b:86:d2:c9:51:0a:05:56:86:98:d8:78:a9:40:
         54:ad:0d:30:c0:87:ae:fd:41:8f:7d:c1:88:e0:e4:43:72:3f:
         f4:61:76:2b:fe:2a:aa:c6:1a:43:22:76:90:96:d0:ef:48:8d:
         a8:96:74:76:af:71:8e:e8:c0:15:ab:56:09:48:14:98:8d:89:
         45:96:46:19:35:c4:66:84:d9:0c:2c:7e:8a:aa:4d:e5:0a:81:
         0e:5f:17:73:f2:d2:d6:3a:e4:7c:90:34:b5:97:8f:eb:d3:03:
         31:79:f8:f5:34:43:d5:92:08:33:82:70:47:e5:47:1b:74:db:
         05:14:f9:c9:c2:98:35:9c:4c:2c:f7:38:ec:c2:1b:1f:5d:13:
         8b:e1:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:21 2025 by rpki-client