Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
File:                     7aff9897-1698-329b-9320-a0c99cd37822.roa (raw, json)
Hash identifier:          k24ISP4dZsiBizQ3N8z8xtponsDr6KtKeWfPttiaEdQ=
Subject key identifier:   A5:77:D2:20:B8:3F:92:AF:3B:4B:3A:98:B7:51:63:0A:C0:35:E6:02
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE346E030F61764DA1400
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:46:e0:30:f6:17:64:da:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ae73b339-bc71-4e0e-957d-1c26e82e86a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:18:45:08:de:62:a0:11:18:f2:eb:7c:a6:
                    83:40:3f:8f:65:71:6f:be:05:a7:87:32:74:ae:50:
                    06:31:65:cb:d6:50:96:48:1b:50:8b:7f:de:ab:a7:
                    9f:9f:bb:3f:ba:ae:79:18:bb:53:49:26:12:cb:74:
                    e6:23:00:e9:dc:b5:ba:e5:11:5e:c2:83:e4:01:91:
                    03:c5:7b:8d:38:7c:1d:70:f9:5b:0c:46:75:2c:fb:
                    a2:6a:51:90:4f:11:ca:f4:bf:9b:90:d8:c0:b8:cd:
                    df:ea:51:3e:be:fd:5b:d4:f5:1e:15:80:74:b4:02:
                    9b:9f:ed:62:53:bb:94:74:51:3d:ab:fd:f8:c3:4e:
                    e6:4e:85:25:f2:1b:03:ff:40:5a:a8:8a:4a:24:61:
                    71:11:29:68:ee:8e:8a:a6:6a:d0:79:4b:85:37:ef:
                    d9:f8:83:3e:2b:eb:5e:53:16:f1:dc:b6:4a:bd:4b:
                    24:1d:ca:8c:37:70:a2:6a:c3:22:c7:c2:fa:35:20:
                    8e:db:1a:6b:32:a3:10:f6:19:0b:00:02:94:03:a1:
                    23:19:1f:2b:43:9c:c9:52:b4:a5:c3:30:91:cc:dc:
                    e8:09:3b:4a:39:32:ab:20:c2:ca:65:55:0e:92:dc:
                    c1:c0:43:5a:11:2d:ae:45:56:5d:68:ec:39:81:6c:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:D2:20:B8:3F:92:AF:3B:4B:3A:98:B7:51:63:0A:C0:35:E6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:0a:bc:34:9a:fe:ec:0d:12:76:66:99:d6:0d:4b:2c:34:
         e9:ce:cf:c4:5c:89:f8:b7:a5:dc:20:2b:92:25:51:38:2e:80:
         80:cf:ef:30:fc:1a:5e:eb:24:63:58:c3:36:ae:90:49:84:fb:
         96:31:4b:73:c5:f8:70:9e:39:a4:1a:e7:5c:0b:cb:ad:38:2c:
         25:e5:8f:92:2e:b1:7f:44:a4:81:18:2f:b2:dc:e1:8b:c4:25:
         68:ca:05:71:58:6e:40:57:40:6a:44:c9:1e:3f:4f:9a:3f:09:
         b5:b1:4d:58:22:e0:5e:d3:98:63:20:cd:50:ef:7f:05:4f:a8:
         fa:b9:3a:a4:c2:e7:a7:16:6b:d0:14:43:84:91:98:25:4b:ad:
         ff:b2:80:5e:e8:de:00:e3:a0:45:76:94:db:85:f4:d4:ee:05:
         f7:7c:d8:3c:a4:40:9c:79:df:72:2c:b3:06:b5:b0:6a:19:73:
         82:b8:ed:2e:d6:cb:48:2f:fa:78:74:f1:67:59:83:19:b4:f1:
         5d:a8:ad:65:2e:da:e7:6b:88:9e:05:1a:5c:dc:e3:3d:c4:87:
         b9:a0:36:bc:2a:38:64:2d:53:22:c2:bd:f6:92:2a:30:0c:50:
         e0:7c:e3:ae:34:4a:6d:e8:2a:89:ce:91:3c:53:18:cf:3d:26:
         10:38:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:51 2025 by rpki-client