Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/b0282e8c-aab8-359b-9fb7-8eba8c616769.roa
File:                     b0282e8c-aab8-359b-9fb7-8eba8c616769.roa (raw, json)
Hash identifier:          W/XGKdwvDJ0j///wJyhJ04rBDrCIZzkHZCDmzphqJmw=
Subject key identifier:   28:17:51:27:50:4B:4A:0E:5E:EB:88:B9:6D:01:B4:5F:64:16:9C:DF
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584979743849A1FC4D2713AD4400
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/b0282e8c-aab8-359b-9fb7-8eba8c616769.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     400097
IP address blocks:        2606:3d40:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:38:49:a1:fc:4d:27:13:ad:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=033349e8-9d19-4914-81d5-f7c02377cb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:c6:f1:0f:16:bc:b9:de:fc:d6:d2:d6:f2:
                    93:07:ba:6f:be:1e:05:0e:b0:08:fd:a4:00:89:74:
                    df:d5:21:cf:a1:b8:b0:55:9c:ff:d3:5a:c8:b1:21:
                    ca:82:af:e8:58:2c:03:d1:a7:bd:a3:69:26:5a:93:
                    48:16:1d:62:42:ba:dd:e7:05:ea:f1:1c:28:da:80:
                    59:0f:69:75:61:71:07:cf:26:13:a3:1a:82:0b:79:
                    26:5f:c4:e7:f1:1e:6b:bb:c2:69:67:ac:cd:23:f2:
                    ad:89:14:53:8d:51:4e:36:9d:62:4e:a0:cd:0f:c2:
                    42:7a:17:e8:cf:0e:af:06:5e:2f:11:5c:79:4a:90:
                    85:6e:39:8c:d2:9a:b8:66:a1:b6:1d:a9:fb:b6:ad:
                    66:4f:6e:5f:15:42:32:05:8c:f3:6b:99:7c:ca:bc:
                    ec:de:18:43:d2:65:b5:30:46:ac:8b:78:2b:72:66:
                    c8:0e:fc:9e:6d:1f:6e:2e:db:b4:2c:dc:24:cd:a4:
                    10:de:91:c7:02:fc:72:5c:e3:14:03:b9:b5:3f:2c:
                    21:41:89:5e:65:ec:76:29:33:8f:12:b5:e7:68:88:
                    ab:e8:45:16:e2:c1:d7:9a:95:fb:18:10:eb:ed:df:
                    52:05:f1:9c:a7:ed:2d:12:e8:45:99:34:a5:f7:97:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:51:27:50:4B:4A:0E:5E:EB:88:B9:6D:01:B4:5F:64:16:9C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/b0282e8c-aab8-359b-9fb7-8eba8c616769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:00:74:f1:51:1e:0a:3d:1a:32:dd:48:28:22:e0:63:9e:67:
         13:16:fc:84:eb:d8:86:47:18:1b:d1:e6:f6:00:78:4f:cf:9f:
         c4:3a:43:e2:33:68:fa:f7:40:45:90:f1:81:bb:8a:fb:00:67:
         24:3d:7b:f8:d9:86:9a:a0:f0:21:eb:ec:21:ea:af:59:46:72:
         40:92:cd:95:49:1c:44:eb:a7:9f:52:88:25:8a:7e:fe:08:2a:
         30:92:5e:92:0a:cf:d5:4c:9e:e2:5a:66:13:19:cc:fb:bb:0e:
         a3:44:e5:21:4f:a8:2c:39:63:71:da:2c:e8:6c:51:b8:99:e7:
         71:98:fb:54:49:45:00:5b:ae:cf:80:b0:22:ed:13:85:93:56:
         66:dc:35:55:ba:3d:b4:b7:5a:d6:3d:69:9b:79:ad:30:6b:10:
         11:1e:9a:67:f6:c7:a6:f0:4f:3a:41:87:d0:42:ff:34:3b:6f:
         30:df:90:19:c6:e4:4c:d6:7d:e9:73:ce:ab:b0:16:8c:e2:4d:
         a9:c2:2b:c4:a3:6a:8a:e5:f5:50:cc:91:0b:dd:fb:ea:ff:72:
         eb:a8:88:0b:94:3c:da:b4:4c:c3:22:31:e4:e9:91:7f:85:37:
         05:b3:4a:ac:30:09:68:da:41:2c:62:a1:60:e8:06:f7:e6:0b:
         83:7a:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:56 2025 by rpki-client