Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
File:                     726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa (raw, json)
Hash identifier:          ExWxioEFBV+PKIRkJ/EkGbw1jZr4Gao+nAQDrgXBhy0=
Subject key identifier:   28:B5:63:56:98:68:FC:EB:91:82:64:4D:C4:DD:1F:FA:2D:BE:60:2A
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B64186F1074B7518FACD180
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        2606:a100:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:18:6f:10:74:b7:51:8f:ac:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=2bab342c-c5a8-4ef4-a292-c9a02a04a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:3a:de:45:00:fa:29:e9:d2:06:d0:16:0c:
                    98:46:f7:93:a4:28:82:75:fe:37:57:d5:06:84:64:
                    62:ed:d7:f7:98:a3:52:30:d9:46:03:1f:04:5f:53:
                    c5:87:46:f5:ee:2a:07:8c:40:d8:c5:fa:de:dc:64:
                    c6:96:4c:4f:f2:d8:bd:1f:6e:b7:b5:ff:52:59:52:
                    32:d2:6d:11:a9:52:50:78:51:32:39:62:e0:86:8d:
                    c5:f6:eb:da:6d:82:65:0f:b3:04:c9:c5:5e:b2:22:
                    38:15:33:fe:99:d8:65:60:f0:a7:b5:19:e8:c4:76:
                    29:05:f3:6d:5c:6f:22:68:e3:28:2b:7c:31:f2:ff:
                    e7:b2:8d:50:33:7b:f6:41:27:0c:05:0c:c2:e6:ed:
                    03:3b:c2:c3:38:21:46:0f:76:33:62:69:09:d5:7f:
                    80:da:06:f0:50:3a:93:a0:71:55:61:32:7b:2f:42:
                    2e:dd:b0:a0:0e:a2:a5:eb:c2:f1:be:45:79:ee:a1:
                    bb:5c:46:47:b9:e0:53:1f:9d:2c:e5:b1:b9:bc:b6:
                    bc:e3:e7:16:88:e1:5f:f2:7f:3d:f7:17:1c:90:6f:
                    65:81:0d:e1:66:a4:5e:20:65:9f:07:27:a2:6b:49:
                    fc:80:21:f2:aa:b6:58:32:2b:17:7a:71:99:69:87:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:63:56:98:68:FC:EB:91:82:64:4D:C4:DD:1F:FA:2D:BE:60:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:65:91:c9:52:57:54:d0:00:7a:94:db:0d:0e:10:e8:38:f7:
         cd:d6:df:09:57:62:2c:58:34:6a:bf:18:2b:0f:10:08:b0:11:
         ed:37:11:86:e7:a7:84:51:f1:da:3e:4b:10:0a:b6:c5:20:75:
         30:5b:eb:02:45:5c:f4:7a:a1:73:7c:c3:89:6d:f4:39:f0:c3:
         ce:ed:61:d7:a6:ea:95:56:7f:f5:2d:9b:8f:b2:04:cf:11:42:
         02:02:80:04:9f:e2:f6:9a:17:8d:9a:87:60:8c:4b:b9:06:1d:
         1a:2f:68:3f:4b:1a:67:a5:63:2a:70:7b:cc:18:dc:04:3b:0b:
         ef:c2:65:7a:3b:19:5d:65:7d:1d:05:e8:94:dd:18:2a:dc:24:
         d1:7d:73:f5:59:b9:80:8d:ee:cd:53:2b:c8:fd:d7:df:9c:3c:
         a1:c4:03:20:ee:0c:db:ef:c1:ba:8b:08:99:db:5d:1e:13:33:
         e7:be:c1:11:06:4a:10:e8:8d:9c:97:26:10:5f:da:ce:a4:97:
         96:b5:d4:5a:5c:08:f0:5d:92:88:7b:44:c5:71:14:43:bb:5a:
         4f:8c:c1:28:c2:8f:9f:87:57:fd:02:39:16:11:47:1d:c9:b5:
         4e:e4:ab:e2:ec:df:34:bc:0f:28:bc:e0:e5:20:da:34:c1:6e:
         e8:0b:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:45 2025 by rpki-client