Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
File:                     ebe79a59-4947-3591-abf8-3a90402caae2.roa (raw, json)
Hash identifier:          X67X/JxamT2NoeuKsiwWRxpwdKtcUyiZjiF9jta5DxE=
Subject key identifier:   11:DF:61:DA:C8:ED:17:30:8C:3C:C0:A5:17:BB:8D:A3:43:24:BB:44
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3898A0FC9C6CE518A00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:89:8a:0f:c9:c6:ce:51:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=2a321d79-bcb0-4db3-a33e-20e341d91d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8c:51:60:86:1a:f0:cb:bf:a3:18:a5:87:ed:
                    84:d6:a2:1a:5e:63:95:ce:93:5b:ef:38:ff:55:73:
                    39:a2:b5:96:c6:88:dc:db:af:e0:9c:8a:a6:a4:b5:
                    24:5a:bb:96:e7:b2:30:2c:c3:b6:b9:24:bf:33:6a:
                    9c:10:b6:fb:52:ee:bf:3f:cc:71:a9:64:8f:9e:a2:
                    19:20:27:19:c4:e6:8a:d2:11:54:ad:6d:ae:9c:09:
                    29:0b:33:d8:fc:db:68:ec:76:e3:e3:39:a5:fe:c3:
                    f8:66:9b:1c:03:fe:f1:db:56:f7:e2:7d:78:c6:ba:
                    af:11:14:f2:96:76:02:f0:ba:8f:60:a0:ec:d1:73:
                    18:f5:ce:01:8a:b4:90:ce:97:93:64:55:75:93:3a:
                    db:63:e9:bc:6e:c6:fe:f7:7f:ec:2e:bf:ad:81:db:
                    d0:6c:c7:ba:21:9a:ce:41:8a:fb:a1:e0:de:46:7e:
                    f2:ee:ba:f0:6a:36:1c:50:63:3b:b2:af:4d:4e:55:
                    7a:78:8a:58:5d:aa:68:c0:26:c7:bd:7d:8c:35:73:
                    5b:e6:73:a0:69:7e:e5:da:c0:5f:65:4f:e3:73:90:
                    e4:64:6c:fa:7b:92:5a:53:5f:5b:bb:65:75:9a:ed:
                    77:19:a9:12:cd:7e:e0:49:56:c4:d2:db:80:2d:84:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:61:DA:C8:ED:17:30:8C:3C:C0:A5:17:BB:8D:A3:43:24:BB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d5:12:64:72:09:30:7e:ea:ed:b0:df:e2:9a:8e:36:f8:ce:
         eb:4a:47:26:6c:ff:da:54:0a:6c:3c:82:5c:e3:72:91:83:aa:
         8b:0d:eb:50:32:75:b2:37:67:75:32:e8:be:82:41:a3:36:4e:
         7a:29:5b:ee:d8:72:72:52:25:81:57:1f:a2:9d:7e:5a:95:2c:
         82:81:ee:8e:1a:f8:35:c4:eb:05:0e:5e:11:a8:15:1a:d1:d9:
         1e:6b:cf:54:2a:51:dd:49:4f:22:91:9b:e7:c8:a2:5c:e9:f5:
         d8:46:ce:5c:49:98:a5:35:3f:b8:7f:b2:81:43:a9:7a:fd:5f:
         51:d9:4e:c8:40:76:f9:97:a4:5f:39:6d:1d:bb:b6:f2:0d:c2:
         ba:09:ef:10:fd:44:73:26:30:c6:f4:14:7e:ca:c1:3f:95:8a:
         49:00:9a:42:97:d6:cd:3f:c5:c6:c3:c3:7e:ae:84:85:b6:5d:
         d9:f1:c4:9d:5a:74:20:37:73:10:f9:b1:48:34:f5:c8:10:5d:
         a5:97:a5:69:08:66:59:59:3c:22:1b:f0:04:3f:33:0a:fa:18:
         ae:74:a0:0f:73:8e:7f:a6:8a:7d:20:1c:5a:ea:7e:02:25:be:
         27:8a:4c:6f:6e:54:9b:0c:90:64:f8:15:0c:01:d8:5a:b6:33:
         28:8b:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:02 2025 by rpki-client