Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
File:                     08bace97-f9d5-3a68-9b72-603747fc7988.roa (raw, json)
Hash identifier:          p1Q4CRzxv8tpozQptfFxdYLt3sx31rGmFTx5SDiHvaA=
Subject key identifier:   86:2E:0E:43:9D:57:16:1E:13:FA:94:64:7F:DB:63:8E:08:B6:D4:C3
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B6418F3DABD0B3308C55DC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        2606:a100:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:18:f3:da:bd:0b:33:08:c5:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=b0b7f42f-d22c-4a0d-af25-e12efafa8a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:0c:96:fb:b5:60:3c:8e:29:10:78:21:13:
                    80:74:e6:e7:2f:92:78:c8:0f:df:d3:95:98:7c:44:
                    12:26:98:3b:13:aa:d6:16:99:5b:6f:2b:b5:da:52:
                    62:9d:3b:01:d9:11:73:d8:02:45:5c:3b:39:fc:d5:
                    33:3f:ff:cc:ff:c0:25:58:20:8d:42:0b:0f:ba:d5:
                    c4:df:4b:b1:cf:7f:ad:8a:1c:48:f4:1f:4e:5d:82:
                    80:6c:e2:b3:88:23:83:42:20:54:45:a8:76:7f:e0:
                    d5:cf:a0:0d:f9:7a:51:3e:65:00:79:ab:df:f3:ac:
                    dd:b6:fb:08:65:0e:fd:9d:ac:d6:8b:4e:70:6c:34:
                    a5:a9:13:84:0f:57:2e:0e:9c:20:16:37:19:c4:00:
                    de:7a:bf:04:a5:71:47:07:3e:63:51:d6:d1:28:30:
                    1f:bd:eb:1c:73:15:13:fc:ca:af:5a:09:6c:d4:50:
                    ef:2b:cb:e2:6a:5c:61:be:63:6e:6a:1a:8e:50:9b:
                    b8:f5:b7:eb:3b:e3:d1:09:e0:18:c4:f1:c7:b6:63:
                    bc:96:32:d9:26:28:b9:4c:ae:f9:0e:f6:83:35:c1:
                    15:2c:7e:3a:07:44:8f:8a:5c:26:99:1a:87:fe:b7:
                    1d:51:b3:63:59:96:96:77:35:98:50:8b:cf:68:42:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:0E:43:9D:57:16:1E:13:FA:94:64:7F:DB:63:8E:08:B6:D4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:19:43:72:c3:13:2d:88:ff:e5:1d:3e:47:03:a3:c1:be:
         3d:d0:01:f3:43:0d:26:d8:92:6c:ad:bd:c1:d7:ad:63:76:7f:
         00:9c:c2:a7:ea:a1:6a:f8:28:72:36:96:e3:e0:f1:2a:ce:7e:
         80:cb:60:37:75:55:85:03:70:1e:35:e7:58:84:52:8a:d4:98:
         02:8b:e7:4d:6e:54:42:fc:f1:ff:11:04:34:f7:7a:28:63:92:
         7f:84:bd:d5:0c:9c:fa:aa:43:91:f2:d1:23:68:00:52:fa:2c:
         5e:c4:7e:fb:3f:b4:d6:20:a1:ea:29:d7:54:b8:c6:3a:40:cf:
         12:ae:a6:2f:25:2e:02:54:6b:98:b0:2a:97:eb:9d:97:92:9a:
         90:38:9c:a0:5d:d9:31:eb:f9:36:83:f8:7d:95:93:c3:0e:7f:
         6e:6a:41:43:59:20:a7:30:2c:8c:1d:2b:e9:be:83:63:d4:b7:
         9b:b2:e5:df:50:90:76:d1:57:be:69:ba:a9:67:7b:28:97:03:
         50:f4:21:63:6b:a4:f2:c0:f5:63:8c:b7:65:f4:c6:0a:34:a3:
         3b:4b:de:f3:61:0a:5d:2f:a2:58:43:f2:3f:00:c1:fd:90:a0:
         86:84:7f:75:22:a1:55:88:a2:89:a4:dd:e5:3f:f7:4a:2f:14:
         75:da:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:02:59 2025 by rpki-client