Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          +eLAYC1llUcxS1TicXnUviW0CFs1fu3kIpiQqKy2XwE=
Subject key identifier:   20:18:1D:53:AF:BB:49:33:4C:16:54:C5:D8:4F:C3:C0:99:E2:D9:27
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE41D89681049AD9DADC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e4:1d:89:68:10:49:ad:9d:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=561d4124-9b23-4aa1-ac00-59a8774d1afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:5b:49:2c:72:7e:42:6b:d7:1f:43:af:86:
                    5a:af:86:7f:53:77:78:0e:c6:31:80:c0:02:52:c4:
                    7a:5a:ee:14:69:58:62:92:d3:53:7c:7d:97:43:6c:
                    68:75:56:08:dd:89:dc:d9:f9:08:24:42:da:2f:db:
                    d4:10:56:92:4a:be:cb:a1:d3:09:42:1a:eb:79:99:
                    be:dd:87:74:f3:31:be:60:ca:8f:87:e7:47:89:e4:
                    0b:4c:f4:0b:58:d9:73:07:75:d5:25:66:56:26:38:
                    3d:1b:60:02:f9:67:ef:a2:b7:c8:fe:71:48:7f:00:
                    71:da:cb:6b:08:64:66:a6:d8:0e:96:90:d5:13:0d:
                    de:9c:01:f3:6f:96:10:ee:37:ff:6a:a5:05:4c:d2:
                    2f:5e:36:9a:21:42:ad:a9:61:fa:fb:09:6a:d6:5e:
                    07:ff:e9:3f:6f:5d:03:1d:78:c3:e2:f4:d4:f4:b8:
                    06:8b:26:d6:58:7e:dc:a2:36:d5:e4:2a:53:d6:8b:
                    ae:c2:46:4a:96:16:09:10:81:8f:52:b9:af:0f:49:
                    57:d7:ca:b7:bd:75:c9:a8:a6:46:a6:a9:90:e6:45:
                    8f:1f:fa:5d:6d:f1:ed:0d:89:d2:80:ce:a8:b8:ea:
                    80:1a:73:1b:65:38:64:66:6b:ea:e9:bf:8e:87:bd:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:1D:53:AF:BB:49:33:4C:16:54:C5:D8:4F:C3:C0:99:E2:D9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:3f:ca:f9:93:87:92:ed:be:04:9d:a5:9d:0e:9b:97:a5:a0:
         15:be:07:75:1a:bd:40:5d:9f:cd:9d:e8:42:68:f6:74:dc:be:
         1b:a9:5b:cf:52:55:e6:ff:e7:bc:8d:90:4a:69:91:52:f8:c4:
         6b:b3:ed:e2:74:a7:16:0f:f1:10:a5:3c:40:65:e3:f8:3c:b8:
         7b:48:23:2b:55:0d:a8:d1:78:3d:df:ca:de:7b:ee:2f:8c:12:
         93:00:7c:9c:28:a0:fd:1d:8c:e6:39:e3:91:26:95:b8:97:d7:
         f8:92:75:4d:a3:ab:b4:de:05:98:50:af:f5:1e:15:4d:a6:75:
         83:4c:89:53:fc:09:ac:6c:68:23:82:df:5e:98:d6:3a:92:e0:
         2f:e7:f9:d4:9f:2b:33:86:f2:62:9f:58:8c:ad:91:77:27:6c:
         6e:e6:22:3a:3f:8a:39:ba:b8:a1:5c:c5:9a:37:e9:51:24:90:
         5c:9f:db:27:38:5c:1a:63:b0:93:72:2a:0f:fd:02:26:61:34:
         a8:1b:63:ac:01:17:8e:26:43:da:61:f3:25:cb:45:74:42:8c:
         66:bb:5b:3e:94:16:c1:71:ff:1c:e7:47:54:68:ec:a4:73:7d:
         d5:93:af:c6:8d:4b:1e:dd:29:99:84:64:a4:9d:76:d9:6b:8b:
         b8:1d:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:06:37 2025 by rpki-client