Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
File:                     7aff9897-1698-329b-9320-a0c99cd37822.roa (raw, json)
Hash identifier:          L4JPw4jX0WBDsa8nx+pT8TJ+DZuoEzlNpY8wedSB0fI=
Subject key identifier:   2D:55:E1:48:33:FE:1E:F1:BD:9B:C7:D7:02:E6:C4:BB:45:31:2F:54
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B64181C1414DDCACED6B670
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        2606:a100::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:18:1c:14:14:dd:ca:ce:d6:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=cda3a080-087e-4104-94cb-ec6ee80a8e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:65:32:f9:bd:6e:6c:b5:94:ac:8c:be:34:03:
                    6e:3a:8a:d4:fb:7a:0b:50:14:b2:02:96:7f:96:dd:
                    b7:54:f1:ee:31:00:8f:09:be:ae:17:ec:96:b0:4f:
                    cb:a5:7a:7d:78:e5:1a:20:5b:dd:1e:8a:a1:ed:43:
                    8a:9a:87:bc:ec:9a:5d:a8:62:34:95:96:9b:28:74:
                    55:3c:db:4c:b9:a0:cf:66:4a:c2:20:9c:bc:b4:1a:
                    26:d5:54:93:d7:8f:f8:90:8e:8b:c6:4b:a7:e4:61:
                    b0:27:ce:a3:81:e9:42:0c:3b:3b:6b:66:4f:06:ab:
                    75:03:6c:41:8e:f1:8a:70:00:60:10:ba:c9:de:ae:
                    73:21:d2:61:c5:e4:3b:32:0f:8c:67:57:29:2b:46:
                    a5:3b:31:15:62:07:ff:09:b9:5a:5f:f4:1b:3b:81:
                    3e:98:a1:fe:e4:8f:86:f5:7b:c0:66:6c:4a:06:da:
                    e7:3b:b7:f3:85:f0:43:48:40:01:aa:5f:53:8b:1c:
                    8e:bd:25:02:db:dd:22:13:fb:d7:05:89:46:88:e1:
                    cb:0e:67:67:49:d7:23:bd:67:ec:3e:eb:a9:8e:20:
                    b1:a2:4f:46:f7:50:10:76:98:47:72:21:3e:b0:ad:
                    77:0d:15:63:5e:7c:4b:5a:dd:0e:9e:35:0c:65:51:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:E1:48:33:FE:1E:F1:BD:9B:C7:D7:02:E6:C4:BB:45:31:2F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:52:16:0c:7e:2a:3f:b2:66:50:b8:c8:d0:4e:33:59:51:a2:
         cc:3e:6a:0e:c9:1f:31:84:b6:51:29:98:1a:13:8d:bc:67:fd:
         9b:a9:63:10:9e:86:a4:04:78:39:70:90:62:3d:c6:55:54:05:
         34:56:9e:0b:9f:ce:4d:03:1d:61:9c:bd:86:bc:dd:1e:82:6a:
         a4:90:4f:6d:27:4d:8c:0b:04:ab:0c:25:e7:c1:c3:87:00:e2:
         27:e2:e1:40:fc:da:6a:10:a2:2b:2e:0b:5d:84:1c:2c:12:e5:
         70:f4:df:a8:fc:1d:a0:28:17:e5:b5:49:66:ae:5c:6b:85:9a:
         21:1f:7b:ce:e1:e4:6a:3e:c9:c1:c6:c4:fe:ef:1c:27:e5:2e:
         50:b8:e4:c6:17:b4:74:64:42:83:9a:f2:0d:09:7d:b8:ea:95:
         b8:a8:ca:2f:71:ec:f9:fd:fa:56:9d:21:8c:27:29:eb:83:0a:
         1b:3b:8e:51:30:f5:ef:2a:c5:21:8d:4e:a2:b2:36:5b:65:8b:
         a9:f0:a8:a5:ae:f4:9c:19:32:6a:e3:56:c4:cf:41:87:2d:d0:
         06:3b:13:a2:92:05:11:58:a0:21:48:b7:d8:5d:f7:93:7d:b3:
         f9:e7:2a:a8:b2:97:68:9b:6b:52:4e:99:6a:e7:a1:7b:ed:17:
         10:8b:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:23 2025 by rpki-client