Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
File:                     9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa (raw, json)
Hash identifier:          XuW4KhFI0wy/d3ngr8qhu6B0XAzvHruAXZOllq6Cuys=
Subject key identifier:   34:37:6D:21:3A:83:93:F7:6B:2A:AF:C5:A1:38:17:CD:03:1F:B5:24
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3DBED38D218A8C8DF34
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:db:ed:38:d2:18:a8:c8:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f1304fc4-a1ed-4703-90a7-e8f12da7a9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:fc:3e:2a:12:b7:b3:82:9a:43:e4:b8:db:
                    40:1c:2a:b7:1e:0f:07:f8:32:38:d1:a7:23:d6:39:
                    16:02:fe:3d:c5:eb:67:60:08:4f:8a:01:c5:68:b1:
                    6d:7c:3c:91:15:d2:c0:08:fd:ed:58:51:41:cd:e5:
                    58:66:93:30:6e:58:ee:5d:a0:57:d8:cc:de:f8:35:
                    fd:e0:df:1a:33:c9:25:74:a9:41:bb:dc:fb:23:8d:
                    31:8b:c5:3a:c3:da:48:96:53:57:a8:c7:c1:57:9a:
                    97:6c:24:66:b5:61:b2:91:6f:7a:5a:a9:12:d1:9d:
                    12:26:c6:ee:9d:89:c1:41:28:4a:14:fc:c9:2d:41:
                    b4:f3:14:5e:ad:a5:78:46:74:53:a9:9d:32:98:13:
                    ed:b6:59:e6:62:61:91:f5:5f:be:79:77:03:e5:30:
                    48:31:62:56:f7:ec:1f:6d:19:cb:49:d6:14:2d:c1:
                    9d:9c:b1:e3:a8:c1:14:51:d0:82:e8:df:15:64:95:
                    3a:05:cb:53:a5:72:3d:dd:0e:3d:5b:7b:cf:25:fc:
                    4b:c7:63:af:9a:80:43:c2:be:38:bd:df:8d:94:fa:
                    29:f1:4a:a2:1a:2f:c1:92:af:20:47:f2:13:a6:98:
                    51:5f:96:2a:df:5a:8d:c1:b7:07:7b:51:ba:31:70:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:6D:21:3A:83:93:F7:6B:2A:AF:C5:A1:38:17:CD:03:1F:B5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:be:5e:d1:e0:cf:fb:a5:c3:ad:d1:e3:ec:35:a0:f3:35:
         3a:4e:2b:a3:1d:0d:ee:b0:d1:5d:72:5d:1b:5b:c8:8b:6d:5f:
         0d:57:d6:69:3f:03:c2:67:5f:26:05:53:97:7b:93:f5:dd:1b:
         35:d6:31:f8:e9:5e:15:37:f5:8a:8c:f7:51:d7:a7:cf:52:87:
         27:e1:13:b5:f9:cf:06:31:53:de:38:52:5e:f2:b7:87:6a:e4:
         8c:96:76:01:1e:c6:61:19:a4:42:b7:86:ba:89:97:bf:5a:ce:
         95:59:87:51:6f:27:03:89:0e:60:e8:58:47:aa:ee:e4:9f:ab:
         b1:cd:e2:7c:4a:0e:61:74:ab:45:04:b6:8f:a0:51:00:d0:9c:
         14:f6:cc:6e:99:60:c5:56:d2:fa:4d:9f:b8:07:ee:67:5a:2f:
         6f:37:cb:5a:a6:41:0f:08:55:7d:5f:9c:a3:5d:ca:58:f7:23:
         9f:77:d2:2b:8d:d3:79:2f:c2:25:9b:1d:e0:2a:2e:e4:2f:52:
         fc:6c:f0:a0:54:39:f7:19:e4:d3:ad:ea:5e:2c:0e:8d:dc:36:
         25:98:ac:77:bb:46:37:f4:ab:2f:ba:7f:06:c2:70:d1:67:ef:
         38:57:ca:43:9a:91:e1:ea:33:7b:67:93:26:92:2e:3a:10:58:
         cc:dd:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:29:43 2025 by rpki-client