Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa
File:                     7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa (raw, json)
Hash identifier:          K7NqeWhBdbf2gaWn9EhfG7qDTK6maiieg1FyOa9/OHM=
Subject key identifier:   57:67:D2:B4:BF:E3:79:07:FE:69:7A:D7:E9:98:15:E1:C3:02:01:DB
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B10C9285609ECA050480
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b1:0c:92:85:60:9e:ca:05:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=d9d9e814-d1a0-4cc5-be8e-b71499650960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:51:2d:20:50:a2:c7:2b:25:9d:0c:57:96:
                    14:60:9e:ec:f8:ef:30:b2:4e:91:59:9d:ff:11:3a:
                    33:7e:0b:3c:d8:a4:f1:a3:2c:68:3c:51:56:c2:fc:
                    40:40:6d:3f:9e:60:26:37:a2:db:c2:a4:51:56:7b:
                    24:bd:e1:e3:bd:e3:a1:a1:3d:0a:ab:53:2d:1a:b2:
                    bd:85:42:3c:54:90:40:23:89:ac:64:02:10:15:4f:
                    c9:96:ac:91:f0:23:c2:13:7f:e7:04:d0:1c:f0:cb:
                    14:8d:be:8b:4c:5c:36:42:95:c0:68:7e:47:4d:71:
                    ea:36:9e:ed:8b:6d:aa:03:d0:98:c5:01:8e:51:cd:
                    6e:d4:00:5d:56:4e:25:97:54:b9:c7:38:73:56:97:
                    01:32:0d:ed:fb:40:a7:94:bb:4d:ac:f9:ad:a4:00:
                    17:7b:ef:2d:f5:8e:27:ec:b6:2b:82:97:25:5e:7c:
                    88:11:27:cb:94:52:93:86:2f:b9:62:33:77:83:db:
                    a3:e8:3f:80:0a:0c:92:f4:e3:9d:9f:1e:3d:86:2b:
                    76:2f:72:ec:86:ac:49:05:aa:83:29:25:6e:19:05:
                    c3:d0:60:43:65:64:6a:8f:c0:d6:76:37:f0:38:7e:
                    7b:d3:5b:d4:46:2a:86:4b:c5:60:40:ab:cf:0e:c9:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:D2:B4:BF:E3:79:07:FE:69:7A:D7:E9:98:15:E1:C3:02:01:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a5:8c:b8:7d:12:00:88:41:60:e7:60:7e:fe:0a:27:97:b0:
         c1:a7:87:29:2e:14:9d:de:bf:df:40:dd:c8:34:ba:c1:36:f4:
         59:27:98:7a:de:23:2d:17:d4:92:09:35:b5:43:cb:8d:5a:bc:
         bd:6f:85:51:3f:71:95:3f:14:00:ae:38:ae:15:18:6f:bd:16:
         3a:71:67:9e:7a:a8:bc:0c:cd:f1:8e:36:28:86:80:b4:90:c0:
         4c:65:50:03:34:f4:00:b0:7f:bd:1d:e6:3a:89:9e:6c:db:40:
         3e:85:c6:bb:50:34:d9:03:fd:0c:74:9b:98:33:2c:ed:20:4e:
         2c:9c:27:3a:98:14:a7:97:e2:e4:3a:cd:88:dd:b7:4b:55:23:
         54:30:b8:a4:3e:d9:9b:7f:ba:d6:d9:31:b5:5b:8d:7c:81:d2:
         28:54:8a:5e:bb:14:09:63:e1:e5:00:80:f5:1a:64:85:13:94:
         f2:fa:db:30:e9:ac:1b:81:ba:f2:0d:35:98:29:54:2c:e7:5e:
         b5:87:94:b5:e7:d6:a1:08:1b:7e:ee:46:f0:9b:cf:2d:6d:c7:
         67:b7:a9:ff:cf:3d:04:1e:ca:f0:7b:30:4e:7c:96:f5:d4:d7:
         c2:7b:4f:5c:23:8e:13:9b:17:d8:59:03:c7:a5:b0:d9:0b:bc:
         82:34:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:46:24 2025 by rpki-client