Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
File:                     39a9e277-40a2-31d8-afff-e586f0041303.roa (raw, json)
Hash identifier:          4LLuupPaIU/gQZ8uWmEruNnf92sLeRDh6gNfWlhpuQY=
Subject key identifier:   BC:73:8E:AF:A3:65:0A:C5:39:A0:2F:3D:C0:77:4A:FD:02:32:05:C4
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584B5B074798802CA93EE0289C00
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     400097
IP address blocks:        2606:3d40:3403::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:47:98:80:2c:a9:3e:e0:28:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=f4f99392-0bba-4ab8-9290-54b50f0e5ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:52:26:7f:ea:6e:b5:12:a2:1d:23:7f:8d:
                    fd:8a:b7:c6:0c:fd:13:9f:a3:e3:6b:a0:c3:89:92:
                    93:39:2a:ec:e1:85:a6:07:b8:25:37:6f:c8:18:f5:
                    df:75:42:71:25:fa:f1:2c:c7:44:43:f5:41:b4:7c:
                    e6:84:4b:db:3f:16:5c:8d:fe:fe:39:84:12:f0:c2:
                    63:ef:9d:3a:65:ad:aa:0a:ef:10:f0:73:9b:be:f8:
                    50:8b:dd:cd:57:4d:a5:24:24:19:84:a8:65:f6:80:
                    63:67:29:09:75:f4:57:52:86:95:60:3e:32:b4:8e:
                    c7:bf:dc:e4:7c:3a:ca:b1:92:a3:d7:e7:fd:f8:0d:
                    bc:fc:13:49:eb:c1:f2:e6:25:ac:f6:fc:65:ed:c0:
                    cc:4a:c9:6e:e5:6c:b0:f5:c7:c7:33:a8:d7:aa:5c:
                    58:65:6e:23:bd:42:21:49:62:99:53:80:19:a6:90:
                    e1:c9:82:da:c2:6d:71:99:db:9a:64:ab:df:e9:b6:
                    b8:68:11:60:d6:5d:d7:7d:1e:b9:c6:5b:2e:ee:c6:
                    b9:b0:b5:54:70:2a:29:de:9d:e4:a1:a6:81:23:d0:
                    90:c2:31:c6:6b:9c:c6:a2:78:54:d5:f1:a2:2a:30:
                    58:f0:64:27:1e:37:e0:63:07:5a:ce:45:09:dd:94:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:73:8E:AF:A3:65:0A:C5:39:A0:2F:3D:C0:77:4A:FD:02:32:05:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3403::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:84:35:b1:99:5b:9a:2f:51:01:37:3e:6b:f9:d5:19:10:08:
         54:27:97:10:d6:92:89:82:be:2b:95:10:86:44:aa:83:b5:24:
         d3:ae:05:4c:5f:2e:ce:1b:48:a3:6f:63:c4:40:84:9d:bd:27:
         a6:83:4e:06:6a:b3:fb:ac:1a:c0:c8:31:03:90:45:ec:21:48:
         13:84:c2:62:e8:b9:b0:fc:72:e5:df:a4:f1:72:f7:93:13:98:
         ac:60:be:e6:2a:25:a7:be:bc:0b:46:55:b0:88:83:60:93:6d:
         91:84:23:3a:b2:75:4d:56:1e:3c:65:1b:ff:1d:d4:f4:15:ea:
         3c:72:a5:96:0e:22:25:e7:2c:3b:0b:6c:0e:42:0b:0d:f2:ea:
         9e:d1:c6:fd:41:1d:47:6a:01:d2:a2:a4:37:17:1b:0d:eb:65:
         15:c1:f2:42:f8:1a:e4:92:bd:3e:05:a5:61:47:40:71:e7:8d:
         65:ce:c6:7e:f1:d9:56:2a:5a:43:23:9b:d2:24:33:ed:2b:27:
         6c:4e:67:4d:8f:ac:03:17:fd:46:b0:62:07:55:43:5b:3e:a0:
         8a:2d:fe:e8:1f:1b:0d:e6:a7:dc:6a:93:a8:a4:9c:ab:5c:88:
         02:9e:cc:92:82:80:ed:c3:2f:87:77:18:cf:dc:e5:83:75:36:
         86:91:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:31:01 2025 by rpki-client