Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
File:                     08bace97-f9d5-3a68-9b72-603747fc7988.roa (raw, json)
Hash identifier:          C0zT8VuPt9z0y/B7qxHJ8lSmQ7Hi1aA9LkrqiEDbdp0=
Subject key identifier:   6F:A3:CB:6D:31:E7:A2:AC:10:1C:B3:EF:CF:A7:04:16:E4:3F:D4:ED
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B11DE79D5C28747D0BC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b1:1d:e7:9d:5c:28:74:7d:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=39e73988-5277-4bed-8226-ce54089b7d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:e6:2f:d1:38:26:b4:3a:32:58:1e:e0:76:
                    87:c9:63:24:de:61:eb:3b:4e:f5:db:c2:eb:36:d8:
                    35:d1:50:64:57:5f:fb:25:22:ac:78:76:e7:67:ef:
                    6d:f9:88:34:84:2e:f2:8e:de:4c:11:e7:d8:ba:df:
                    82:74:cc:3d:75:38:ef:54:3c:c9:9d:6f:43:df:6e:
                    11:d9:fd:71:df:6d:ef:a7:b7:0b:78:fc:bf:46:d8:
                    d1:fd:ed:84:c1:3e:45:0f:54:28:85:bf:b7:2c:ea:
                    68:a3:17:4a:dc:5a:32:79:23:e7:f9:19:c1:08:ff:
                    7d:71:21:cf:cd:ad:c0:1a:e7:5e:ea:a6:06:48:ce:
                    49:85:12:54:ae:bb:0c:7c:c3:8e:1f:59:4c:15:6f:
                    08:e9:20:65:93:8c:51:e7:eb:df:73:ca:a4:38:28:
                    39:12:18:13:ae:f6:1a:3e:e9:44:34:c1:32:13:35:
                    8b:20:cc:7d:d7:21:fb:59:7c:80:59:aa:18:76:5b:
                    1d:a0:55:e0:c1:7f:76:a1:e6:71:c9:5e:db:79:15:
                    ef:f7:1a:9d:0f:92:08:81:4d:bd:0e:fa:c9:40:d5:
                    c4:87:ee:e8:b8:c0:72:28:2d:1c:14:8e:58:81:cf:
                    42:85:b4:89:c2:16:f7:5a:5d:d8:80:63:8b:5e:b7:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:CB:6D:31:E7:A2:AC:10:1C:B3:EF:CF:A7:04:16:E4:3F:D4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d2:d8:ae:88:4d:1c:32:55:27:7a:e4:e2:79:fc:1d:ea:ab:
         3b:cb:05:6c:48:f6:a7:3a:7e:a9:a8:69:30:43:4d:e4:91:19:
         a1:d2:5f:3e:74:b3:4e:86:8b:46:4e:5b:f7:99:6d:93:0b:b3:
         41:40:0c:42:d0:69:f3:8a:f3:90:d0:50:58:c1:d6:dd:4a:27:
         ba:e2:74:0f:bc:ce:ca:38:c5:7d:d0:88:40:6f:45:68:b3:6a:
         0f:70:46:e4:74:e0:1c:93:27:c3:a8:c3:17:2f:f2:70:88:45:
         06:75:42:aa:25:32:23:7e:9c:af:f2:fd:93:a5:fe:b4:03:9c:
         c0:5e:d2:09:4a:14:93:62:ed:cd:57:39:c0:cd:8b:eb:6d:a6:
         45:30:cf:7e:67:26:4a:c4:9e:6f:a6:50:7e:2e:c1:89:a1:70:
         fa:6f:f9:42:e1:f9:f3:19:20:b3:6b:37:70:a4:27:2b:40:32:
         33:9e:f1:fa:82:07:9e:8c:8b:4f:77:73:d7:74:63:41:c2:f1:
         bd:2a:48:6a:27:fb:d7:2a:60:14:a7:01:48:44:58:45:28:05:
         19:aa:05:f6:b8:cd:b5:0f:7c:7d:1f:9c:5a:59:df:a0:7b:e3:
         b9:8c:41:95:ba:8c:38:e3:32:c9:4a:81:33:27:7d:e4:8b:02:
         30:92:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:34:54 2025 by rpki-client