Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
File:                     726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa (raw, json)
Hash identifier:          YK5IOq5xLTTZ/8HshjbMzNXF9Cf+4wz2iQaf7uIHVD8=
Subject key identifier:   F4:DE:36:9B:83:2D:D9:05:06:18:2F:54:5D:9F:39:B7:1F:36:47:2D
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE374EEDB89F1E786CF50
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:74:ee:db:89:f1:e7:86:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c4f16cf0-d0f5-432f-8dc7-3792f23015eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:89:ad:85:85:fd:18:df:d9:88:ca:c4:2b:
                    9b:ea:4f:89:bb:26:ee:f7:72:02:5e:41:97:c9:b5:
                    11:a2:14:7b:24:ba:8d:c3:37:df:92:8d:26:a6:dd:
                    eb:a4:b5:e6:8f:65:0f:13:d3:0e:ac:7c:a1:33:52:
                    84:ff:bf:f3:f0:2a:f0:2f:7e:3c:3e:61:c5:b4:c8:
                    d4:ae:24:94:16:c6:77:96:62:27:8c:b5:a3:7c:dc:
                    62:58:d5:53:2e:9f:24:23:e3:a2:a4:a3:27:ae:26:
                    79:80:ab:3e:c1:c0:a4:29:c5:bb:25:2c:20:6a:d2:
                    aa:31:ef:21:ff:ec:9f:fe:b1:c8:3e:a5:e3:1e:7a:
                    96:17:d7:96:1f:a8:c5:52:5f:04:61:68:84:29:0e:
                    8d:ee:24:0f:b6:24:a6:7b:6c:6f:ce:98:70:34:99:
                    56:7c:c8:16:4e:18:ba:e4:11:c3:90:c6:c1:41:9e:
                    fb:1c:60:db:8f:2e:e6:24:c1:07:24:92:f0:6e:6d:
                    cb:d4:f8:c7:30:85:72:2b:6c:74:52:82:a5:ad:63:
                    0f:98:9e:bc:38:ef:98:3d:ff:bf:b4:02:46:cf:7f:
                    f4:e3:79:aa:2d:5e:a2:ba:a3:8b:67:07:08:59:fa:
                    c5:5e:78:d0:61:fb:a8:67:bc:65:28:ba:f7:0a:ae:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:36:9B:83:2D:D9:05:06:18:2F:54:5D:9F:39:B7:1F:36:47:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:82:96:89:3f:32:66:17:e5:01:d8:18:0e:32:47:d0:bb:
         96:24:6d:5d:75:b9:6d:dc:56:4f:a6:d3:3b:b7:6f:57:b6:bf:
         35:16:d2:6e:e8:32:d2:df:76:25:67:7c:03:3d:96:e2:11:13:
         fe:86:08:2f:9d:39:2e:da:5e:1a:97:0d:f4:85:e1:5e:7b:bd:
         ed:47:c1:51:f3:92:21:f8:5a:6d:f8:6e:b7:53:7d:ea:c5:52:
         f5:fb:44:6f:9c:63:5c:e2:e2:22:5f:6c:0e:29:23:22:07:b9:
         fc:6a:2b:6a:be:78:ae:fd:8f:84:c9:35:76:97:e0:89:35:f2:
         ec:50:dc:cd:19:0f:50:b4:d8:cf:ef:41:31:ae:9e:d0:ba:b3:
         8b:f1:69:96:bd:39:b9:f5:3b:b9:84:04:af:a9:76:74:6b:ef:
         8d:c7:16:c2:61:b2:f5:8e:f2:e7:91:ab:83:a0:39:31:48:2e:
         3e:7b:f9:9b:bd:96:b2:2d:aa:88:a1:68:ed:89:3b:c9:3d:67:
         c7:38:61:30:38:8c:19:89:c8:f1:44:2f:db:8c:23:ea:2a:2d:
         59:e3:5b:93:8a:61:53:85:cf:56:01:65:b1:b9:8d:55:a4:a7:
         25:2f:6c:86:79:e9:ee:bb:17:02:11:8c:62:a5:fe:b7:23:93:
         10:d7:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:44 2025 by rpki-client