Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
File:                     f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa (raw, json)
Hash identifier:          wsbQHCyOMXCpv0OM7fjyQCyLcV7AqxALrqUAoVS9+XQ=
Subject key identifier:   E6:07:45:C5:67:BC:AC:16:2E:E6:BC:FA:4B:78:C8:F5:9B:79:69:11
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3569AAA519547CC8280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        2606:a100:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:56:9a:aa:51:95:47:cc:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c7390d1c-00b6-46f3-ba68-25da69b3ca5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:08:19:32:ca:7f:1c:2c:41:c9:06:cc:8b:
                    27:90:58:ec:89:f8:89:3d:3d:ca:8f:e6:01:7d:18:
                    b7:05:49:96:72:38:67:f7:a5:2e:ef:c9:c9:ee:1e:
                    c7:f3:c9:3b:6f:21:25:63:fd:f5:92:96:0b:f5:af:
                    40:16:89:a5:17:73:0f:29:b2:80:2e:c0:70:c4:52:
                    08:df:24:8d:e7:1a:3d:8b:39:36:07:c0:4b:14:67:
                    1c:33:3b:e1:78:65:5c:99:a0:fa:0a:76:60:84:66:
                    a2:6c:d7:bf:e0:b0:91:a2:0d:9c:b6:31:4f:ca:5f:
                    05:a9:d2:13:ad:45:1f:63:08:0b:18:86:c8:1e:40:
                    76:2d:a6:67:20:13:dc:4f:b2:e4:bf:9b:f3:3d:f8:
                    ea:f2:a9:7e:cb:a5:5a:60:ec:68:bf:2d:7a:c8:27:
                    a6:0f:e3:fd:d7:b3:93:ad:bc:1d:41:02:e6:45:01:
                    d7:22:e2:6e:c3:60:6a:18:fb:99:10:a4:d7:3b:1f:
                    a8:14:f9:48:f1:38:4b:13:af:ca:82:10:8b:e6:e0:
                    b2:49:8d:89:b1:b3:9c:b0:72:41:18:b9:45:cc:99:
                    bc:68:6c:13:fa:a3:3b:be:20:6b:26:f1:74:a2:9f:
                    ae:9c:1a:cf:14:50:4f:0a:94:c4:fd:5e:80:ec:4f:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:07:45:C5:67:BC:AC:16:2E:E6:BC:FA:4B:78:C8:F5:9B:79:69:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:0e:bd:4e:28:eb:87:44:da:c2:48:8d:94:45:51:3e:0a:
         88:0c:61:30:5a:02:cd:dd:70:8b:20:5d:25:66:15:5e:18:49:
         54:c4:f1:58:37:bb:bd:2d:b1:f7:60:78:e2:a1:f1:79:d9:f8:
         3a:16:f8:5c:e6:ec:62:61:5b:aa:32:04:4f:4c:43:47:71:5c:
         62:08:d9:4c:fe:d9:40:cb:6f:85:22:53:5d:c7:d7:90:a6:f2:
         b9:6f:4b:e6:1f:4a:d8:c5:a7:6e:e6:f3:79:79:bf:86:30:ca:
         3a:4a:7b:07:5f:0c:3c:e2:12:72:56:93:92:96:6b:0a:6e:05:
         b2:c6:bb:7a:94:f9:83:88:6a:d5:83:8d:f8:13:b0:de:ea:f6:
         19:0b:02:8c:27:f9:26:46:92:e2:2e:80:58:92:8d:46:79:4e:
         bc:56:9f:c6:85:6e:98:4e:6c:2f:0d:bf:27:02:0e:9b:52:81:
         23:f1:b0:14:d8:59:d2:ce:83:84:36:ae:d6:31:99:69:3c:95:
         a6:b1:cf:73:3e:81:7e:4d:86:3d:3a:f5:26:4e:f1:ae:ec:25:
         52:7c:48:93:e2:c7:5c:6d:a3:86:a2:fa:22:04:85:e2:b2:69:
         9c:b2:27:08:b5:c0:cd:69:89:8c:13:82:85:f6:b3:18:d0:f7:
         83:82:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:59:47 2025 by rpki-client