Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa
File:                     3205637f-d74b-357d-9491-ff132132e764.roa (raw, json)
Hash identifier:          kMueAABHmxxIZeBAFyK8GHxHQ5bmu1k+rLJN1p6Uh0U=
Subject key identifier:   81:2B:DE:D7:E8:1D:94:A1:EF:B5:DC:3D:F9:87:A0:B4:83:60:8E:2A
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F43285849797437F13AD86480D2B2D020
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     400097
IP address blocks:        2606:3d40:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:37:f1:3a:d8:64:80:d2:b2:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=6cb56374-71c5-473d-9d7e-c25b6b626368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:8f:65:92:ee:cb:34:7d:8a:ba:c8:16:d1:
                    1d:40:8a:de:f4:d8:6a:6f:4e:9d:0f:37:0a:79:16:
                    24:9d:68:4a:ed:b1:ca:c3:ed:b7:94:09:86:2f:69:
                    62:dd:8b:89:8e:7f:a0:bd:4b:0b:3c:cf:38:c0:5e:
                    d5:30:2f:f8:01:64:94:88:70:f5:e9:6c:67:26:5a:
                    13:03:a0:69:1e:44:0e:31:7e:b3:2c:10:7b:b8:ec:
                    11:4d:64:de:a2:05:1b:9e:38:26:6a:f4:ec:30:81:
                    3f:b3:f0:d9:c8:62:29:68:ba:8c:cd:f4:77:7a:c5:
                    b9:46:bd:1b:63:f9:fc:5a:6d:53:66:35:05:35:fd:
                    6f:f1:73:f4:1e:fc:04:f6:31:56:76:ce:72:a5:70:
                    b9:3e:e1:e7:f5:23:2f:eb:26:49:80:58:5d:9f:7b:
                    9a:9f:b9:5c:68:43:61:be:72:ea:93:c1:69:a5:5c:
                    f7:65:1a:4a:03:70:58:e0:ee:2a:81:2d:3a:20:43:
                    3e:c8:1d:25:36:56:ab:52:f1:60:7b:f2:60:0e:93:
                    60:06:90:d1:59:e1:a2:dd:16:ef:a6:a2:b3:ac:9d:
                    28:bf:19:bd:22:1b:89:01:b9:48:14:46:ea:c1:99:
                    fb:9b:d2:56:46:c0:a7:e4:72:fc:6a:db:ca:12:3c:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:DE:D7:E8:1D:94:A1:EF:B5:DC:3D:F9:87:A0:B4:83:60:8E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3205637f-d74b-357d-9491-ff132132e764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:b1:fe:5f:02:27:04:1f:a1:ef:e7:2a:48:a2:4f:33:e3:
         ac:6b:8e:dd:89:40:13:79:3e:8f:4f:ed:a1:56:a9:d3:da:88:
         22:e9:e1:29:8d:70:5a:71:d1:40:29:cd:6e:18:06:c4:be:15:
         fb:92:64:9a:7d:02:4c:3c:e3:43:9a:b4:31:d0:d7:af:94:26:
         5d:4e:a6:63:ae:7b:5e:16:89:c9:d4:4d:b8:ab:d3:dc:24:53:
         8b:83:9c:40:6d:d0:19:ee:f0:f9:95:61:d3:78:21:ee:22:7c:
         c4:c2:92:92:63:02:d0:75:61:f1:8c:51:3d:cb:97:59:96:51:
         08:34:6b:18:38:ac:09:cd:1d:a9:bf:4e:83:a6:e2:f7:8d:65:
         d8:5b:38:db:b2:06:9a:83:e8:be:bd:a1:78:f7:e6:d4:09:8a:
         c8:f4:ab:a5:bb:a0:da:3a:07:96:6a:06:9c:bc:05:d5:08:30:
         d7:d6:0e:59:33:e5:94:17:a9:44:22:61:8e:0f:d0:47:ff:c2:
         6b:9e:d1:11:fb:87:94:f2:6f:15:72:14:20:a7:bc:31:0f:de:
         cf:3d:a5:4f:e0:9d:be:cc:1f:05:1f:bc:b1:a6:7b:f0:7d:78:
         bb:f4:57:32:d0:7d:94:f1:1d:fb:4e:c7:c9:e0:0c:76:bd:77:
         16:86:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:12 2025 by rpki-client