Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
File:                     2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa (raw, json)
Hash identifier:          OedjBwHdc72MRYFzPMaV+MIR3AJSLxaNSeZlM3G1NzY=
Subject key identifier:   97:2D:76:18:1E:06:69:88:2A:05:C0:B2:3B:6D:03:CB:12:37:A8:20
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3B2C03CD8DE6D119940
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:b2:c0:3c:d8:de:6d:11:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=13422316-cf89-4e28-9cd0-bc44522e1101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:fc:41:ab:43:62:e6:45:dd:f3:a3:3b:b3:
                    79:68:bf:f5:a2:a3:dc:d1:3c:5f:f2:ff:04:1c:35:
                    64:44:59:1c:33:26:61:f9:fd:53:fa:c9:aa:fd:35:
                    87:76:32:d1:46:3b:e3:48:9a:cb:8b:2a:a0:cd:c2:
                    48:73:fa:3b:a1:25:ee:2f:bc:2d:b3:5a:49:1a:d2:
                    1b:a4:a8:22:85:a0:37:e1:9b:e3:8a:9b:bc:a5:a1:
                    67:26:86:97:2b:4f:92:fc:b1:e7:08:b6:95:d1:ba:
                    0b:68:21:52:73:81:39:5b:8a:ee:9e:be:44:1a:e0:
                    0d:90:8d:d9:43:c2:3c:d6:63:03:03:f1:f6:f0:37:
                    5c:68:cc:78:06:de:6e:56:ae:90:ba:5e:23:e2:30:
                    0f:fb:f2:03:02:5f:de:d9:29:33:0a:4d:06:dd:00:
                    86:6e:75:ca:da:06:34:67:92:5f:7c:34:eb:8d:00:
                    93:32:f2:75:b5:28:1d:ae:82:7a:33:e0:02:cf:a8:
                    88:99:82:02:1d:86:b2:72:31:bc:a9:b4:8f:ae:de:
                    c2:a6:00:fe:af:91:a7:9a:6c:ff:a2:f2:c5:14:8a:
                    a8:e9:1c:39:32:18:72:a1:47:27:71:74:55:fe:07:
                    3e:73:88:8f:14:b1:e5:f4:19:29:a0:ef:c8:c5:2c:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:76:18:1E:06:69:88:2A:05:C0:B2:3B:6D:03:CB:12:37:A8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:23:43:dc:83:64:c1:7f:cf:a6:87:82:b9:b6:b4:90:be:fa:
         d4:b1:bd:ec:b3:51:ba:ab:df:12:d9:8a:f6:96:b1:1d:38:6d:
         0c:ef:8e:e0:89:7f:54:22:7a:cf:c8:2c:81:5b:8b:b3:36:6b:
         17:d2:55:94:ab:93:e5:8c:cd:ea:76:a6:34:b0:1b:05:c3:c8:
         6c:13:aa:16:0e:b9:09:30:6e:f5:ac:95:21:95:3f:31:17:d0:
         5d:40:d8:34:a0:59:8f:2c:d2:71:4d:29:92:0c:6c:99:a6:9f:
         57:fe:6f:5c:a1:10:9d:42:40:3b:8d:9b:d4:44:52:85:af:15:
         41:47:75:b8:13:16:d7:bb:c3:49:fe:8b:ef:6f:1b:9c:c6:6a:
         b8:41:38:17:a2:4c:61:f6:68:7d:9a:4c:d7:63:aa:39:33:86:
         ae:12:4d:bc:a6:bf:08:1c:a9:cf:01:c2:c1:b2:ad:68:5a:21:
         4a:15:40:89:db:c1:f0:c1:e8:e3:3a:50:1d:33:04:8e:d4:cf:
         04:68:23:3a:7c:46:0e:fc:1a:b9:b1:6c:f8:02:c0:50:21:ff:
         ce:be:71:b6:f8:ea:8d:3b:9f:c7:f9:c9:68:27:ed:27:02:3b:
         8f:74:d8:ab:39:e8:f2:e0:1d:cb:2e:4b:19:e4:e1:47:a1:03:
         d1:9e:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:43:31 2025 by rpki-client