Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/8c9d449c-2408-3b9b-a83a-dfb41d3ada7a.roa
File:                     8c9d449c-2408-3b9b-a83a-dfb41d3ada7a.roa (raw, json)
Hash identifier:          /pgy41MSDna6jNXp8TOrxpzvcHzz7PesYT27ifjmtOI=
Subject key identifier:   3F:B3:F5:49:41:65:CE:6F:E4:EF:87:8E:F2:1C:F8:3E:4B:ED:FA:00
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F43285849B6DF4AC3E10507A1192EE5C0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/8c9d449c-2408-3b9b-a83a-dfb41d3ada7a.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     400097
IP address blocks:        2606:3d40:3402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4a:c3:e1:05:07:a1:19:2e:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=b5e5bdff-e0cc-406f-89b6-6831332739cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:62:13:8a:b3:b5:1f:e9:7c:be:d6:68:84:
                    68:e0:8d:79:ff:ea:65:65:35:da:5d:29:54:5d:f0:
                    81:bb:1e:a3:50:3e:0c:2d:c1:a1:f9:a9:3f:95:f6:
                    80:15:a9:b0:94:f6:dc:be:40:ff:90:1c:75:09:70:
                    aa:d4:35:18:a6:69:a2:b2:46:93:13:80:19:83:b5:
                    ce:bf:88:5a:ce:56:6b:17:ab:d3:b1:6d:f2:66:d8:
                    1f:d7:d4:28:1f:e8:81:e6:f1:61:16:f9:aa:c0:0a:
                    07:9a:8a:b0:8e:2e:dc:a1:79:3f:a0:b8:d4:20:ff:
                    b5:5a:66:ce:63:34:3c:a2:e1:c6:8e:52:fe:76:1f:
                    c5:98:1e:5d:b2:79:60:81:d5:66:7b:cc:ea:1c:9b:
                    80:00:d1:68:21:c0:b9:8e:36:3d:f6:2b:ec:3f:e7:
                    09:83:9b:f9:11:26:db:df:6c:79:55:9b:b2:f4:c8:
                    6d:7a:dc:47:e4:73:27:36:cd:4b:3c:3b:69:e3:b2:
                    c0:56:3f:8f:f0:83:b1:54:1c:e7:ba:11:bb:37:b5:
                    59:d8:47:50:af:ff:9d:6e:71:53:05:f7:e8:e6:a4:
                    3b:a7:89:e7:84:73:3c:8c:60:e8:e6:08:30:24:92:
                    87:b4:00:a7:0a:23:d4:38:73:f0:92:65:5d:6f:45:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B3:F5:49:41:65:CE:6F:E4:EF:87:8E:F2:1C:F8:3E:4B:ED:FA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/8c9d449c-2408-3b9b-a83a-dfb41d3ada7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3402::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:30:70:ec:ef:0f:c8:13:32:5d:3e:b3:e1:2f:53:31:70:
         5d:e8:f5:d7:17:66:2d:17:6b:91:8c:cd:a6:83:91:97:38:e5:
         80:d1:7a:72:fe:14:88:1e:03:37:41:3e:12:bd:1d:59:48:94:
         30:c3:a2:e6:15:32:2e:ee:d4:6e:30:83:07:e2:03:9e:bc:ed:
         53:e0:6a:6e:2f:a0:55:35:c8:43:6d:53:ee:b6:d2:0c:11:1a:
         56:ee:2c:1f:fa:01:ae:0c:dd:ad:10:b4:b4:5e:58:fc:a5:9f:
         f4:1c:ee:af:a2:41:b0:95:7e:88:49:f7:44:eb:ad:95:56:48:
         18:e3:00:8f:0b:c7:36:bb:4d:62:e0:ab:27:f7:74:cb:07:c7:
         bf:22:db:bb:0c:c0:e3:30:c6:69:6c:1c:ae:79:a7:c3:e3:0c:
         58:4d:7b:75:68:48:a0:73:26:5f:0c:26:11:5a:43:b5:cb:1e:
         c4:f6:69:b6:fc:6b:24:7f:cb:66:7f:a9:80:a3:91:b8:8f:74:
         60:66:4f:ac:e4:c9:63:2c:22:72:4f:c9:19:8f:73:67:0e:53:
         c7:48:a5:0b:85:74:ee:bb:ef:80:26:70:d1:77:84:7a:52:66:
         82:4f:13:69:04:ce:51:3e:06:42:bc:aa:83:48:5a:9e:20:bc:
         24:50:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:48 2025 by rpki-client