Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
File:                     423c792a-aec0-33ab-aaca-ea6545d77459.roa (raw, json)
Hash identifier:          47RpX0IfMKNlcz14Z7rPv5QT0YaSIj7zgdUsN7t6t3I=
Subject key identifier:   C6:FB:29:FC:56:B1:8A:ED:FB:55:0E:D5:19:1D:A7:C9:4C:53:5D:76
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3F9CA9844B3B7913580
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:f9:ca:98:44:b3:b7:91:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=16bc1149-8825-4529-8233-cac965650b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:7b:40:7d:c8:eb:16:34:c7:71:ed:fa:b9:
                    29:2e:86:0e:0b:51:c9:88:2e:e6:1b:e9:70:34:c1:
                    2f:1c:52:71:c0:05:0f:44:52:bc:14:22:6c:ff:55:
                    40:25:a6:a7:4d:fb:af:18:9a:fa:6f:cb:57:53:95:
                    33:84:9a:c4:ea:e9:c5:72:cf:b2:5d:d9:51:f4:da:
                    d1:d5:d3:ba:25:7b:68:d5:4f:46:a3:f0:b4:02:49:
                    0b:dc:34:10:79:fd:24:0d:fb:88:8a:37:8f:32:9c:
                    22:4b:e9:9d:39:6e:fd:cb:4c:fe:a7:fd:09:a1:a3:
                    2c:59:81:9a:66:c1:c7:93:84:1d:a8:87:c4:01:83:
                    15:ac:03:7d:ff:a7:b5:d4:a9:93:ae:1b:cd:d6:a8:
                    01:a3:d9:c2:2b:ff:d7:b4:0c:fc:f7:bb:99:94:dc:
                    65:89:1b:b3:56:ea:bb:88:fe:59:ff:8c:2e:24:b3:
                    ec:14:3e:d1:2d:d6:30:b9:20:0c:2e:86:b1:22:80:
                    ce:3e:84:32:71:9e:c4:28:11:6e:87:c6:33:40:65:
                    1a:fa:9c:43:6d:09:f3:42:a5:25:24:c5:20:7b:47:
                    35:b6:6f:31:3d:93:a4:9c:fe:94:7d:54:7f:b7:2b:
                    4e:fc:8e:19:38:18:76:39:57:26:fe:8c:cb:64:d1:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FB:29:FC:56:B1:8A:ED:FB:55:0E:D5:19:1D:A7:C9:4C:53:5D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:d0:1b:b3:0c:81:e4:80:37:99:37:d4:c3:fe:2d:8d:d9:
         2d:ed:d7:03:00:10:91:83:2d:e2:1c:b3:d7:3f:77:01:e0:92:
         e2:01:2a:48:cc:a3:f0:11:a0:30:da:12:d5:d7:df:b9:f8:c1:
         55:ce:77:87:40:f7:73:1f:6e:99:26:9a:1f:97:8c:86:e1:44:
         2b:93:51:9a:36:c5:ad:eb:78:49:44:36:3c:a1:e4:d2:24:1b:
         fe:02:80:0a:bf:63:08:75:f3:04:ab:64:07:de:48:fc:f4:11:
         6d:08:ed:7c:f2:83:d6:b8:c6:8e:a7:72:7c:31:1b:ac:16:49:
         ff:29:37:04:a7:0e:9c:d3:ad:45:03:a2:9a:98:4d:78:e5:32:
         10:8c:07:60:5d:3f:d2:70:cb:2b:9b:3d:3f:f4:40:cc:ed:17:
         34:4c:5c:fd:e4:4a:e6:99:58:dd:0d:ba:c1:86:94:d8:17:a5:
         53:51:4c:6d:c7:e2:5b:58:bb:e7:76:fa:ef:39:0f:f1:33:1d:
         6c:cf:f2:15:c3:d1:83:6b:ff:97:ce:4d:72:6c:98:c1:a3:35:
         e1:20:d4:0e:57:8c:03:9a:cd:11:9c:b9:47:31:ac:7d:5d:2b:
         3d:45:04:6c:6b:24:58:e1:65:7f:d4:49:b2:e7:6e:0a:ae:ac:
         22:94:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:33 2025 by rpki-client