Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa
File:                     ea26638a-da24-3af0-88f1-df23cd94335f.roa (raw, json)
Hash identifier:          PaQDlknC4GzcWxZ8fNYjE+RctCTMeapoyOxd6HrKDwc=
Subject key identifier:   EC:04:31:77:74:18:9E:C6:54:6D:B3:6E:42:34:3F:38:1D:AF:2A:8F
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584B382194106D52334A2D905C40
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     400097
IP address blocks:        2606:3d40:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:94:10:6d:52:33:4a:2d:90:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=04eba48e-5522-44c1-bac3-5e4373d303fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:02:66:4a:67:6f:66:dd:01:ac:16:30:07:
                    8e:76:7d:d5:7b:0e:f4:ca:9e:9e:0d:d4:07:65:eb:
                    d5:49:b3:8d:51:89:1d:b7:7e:a8:39:66:1c:88:b3:
                    4a:3f:73:de:a4:0f:3b:23:04:35:28:17:33:ee:57:
                    5d:49:c9:5c:ea:17:a7:63:21:e0:13:7a:11:6d:0d:
                    fc:e4:e6:4c:3b:81:d3:40:c0:21:10:61:db:a7:21:
                    30:d0:b6:b4:3d:13:88:24:3d:b8:58:81:9f:5e:61:
                    e4:64:00:8f:10:d9:f5:ce:0b:2d:80:04:97:85:3f:
                    36:60:1a:c1:fb:9f:a0:6d:98:b9:e4:f0:30:c1:2a:
                    90:e1:46:65:c8:19:d2:89:31:7b:13:f9:34:12:ab:
                    eb:9b:72:96:f5:cf:25:25:47:c8:84:24:e4:fa:df:
                    5e:30:4b:7f:cc:40:bb:7f:a6:1a:f8:88:a0:ae:98:
                    af:5b:c6:87:d2:76:5e:cb:4c:93:c6:0f:7f:d5:b9:
                    f3:74:8c:3b:62:39:11:cf:76:60:c3:23:b9:77:c3:
                    0f:56:7d:ef:be:3f:22:38:d9:45:15:6d:3d:d2:49:
                    8c:bd:c7:c1:2a:17:70:ac:d3:16:8b:c3:b0:50:79:
                    6b:a6:ce:66:15:4d:ae:85:77:cb:79:af:89:27:54:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:31:77:74:18:9E:C6:54:6D:B3:6E:42:34:3F:38:1D:AF:2A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:76:da:d0:f7:26:6a:15:94:55:cb:8e:06:e5:f6:ae:7d:6f:
         fb:f5:5a:2a:05:fe:85:51:22:ff:62:2d:47:a7:5d:48:44:2c:
         e6:12:6e:3c:c1:ee:e9:36:a2:44:3e:6e:6e:ba:52:0e:08:1a:
         3e:47:98:a5:8a:a2:d7:8a:1c:f4:e0:80:47:e7:dc:5c:c9:0d:
         a5:9c:8d:46:34:ca:77:75:ef:dd:31:57:8e:75:53:34:d8:43:
         eb:a0:9a:70:08:a0:3f:e5:9b:18:9b:53:8e:c4:d5:5c:bd:46:
         71:1d:c6:07:09:fd:75:0c:71:3a:87:df:77:92:3f:28:a5:3c:
         31:9c:9b:6d:07:ef:3b:d4:84:2b:51:91:cf:4c:72:28:c2:e5:
         1a:5a:a0:5a:24:2c:ae:2d:76:64:05:b8:eb:4a:4d:de:24:80:
         74:99:40:98:ba:cc:85:35:89:21:c1:fe:8d:48:9b:08:2a:f2:
         03:e4:f6:2a:d2:b0:bf:82:a0:af:f1:3a:e8:bf:b3:a5:ac:90:
         0b:19:81:a5:96:be:9d:19:4f:57:51:9b:07:64:32:26:19:bf:
         be:05:f3:ee:28:92:a3:fe:b4:15:c8:9d:6d:bd:53:5f:6d:35:
         80:bc:dd:43:d9:d8:ae:52:0a:ae:28:3f:2a:31:42:13:7f:a5:
         91:4e:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:55 2025 by rpki-client