Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
File:                     7aff9897-1698-329b-9320-a0c99cd37822.roa (raw, json)
Hash identifier:          EgqO5EGt7Rt3WC1epBD3Z9LxwIDFUmCK8d41d11gYRU=
Subject key identifier:   B8:08:1F:C8:A7:18:0B:C5:45:47:6C:B4:ED:0B:A9:2F:88:BD:70:10
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B06DB500927EFB055B20
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b0:6d:b5:00:92:7e:fb:05:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=abb8a20b-2211-4122-9530-6f91ff525d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:1f:42:e9:44:6f:db:8b:fd:5b:2b:39:5e:
                    38:c1:d1:f3:73:46:d6:7a:b8:f5:6f:45:d3:37:56:
                    66:1f:f2:46:48:8b:82:7b:5c:cc:fa:64:66:8b:36:
                    f5:9c:5a:e9:92:96:b3:ea:91:4b:af:bb:53:18:2e:
                    20:89:2c:0a:dc:37:8f:09:5a:0d:26:35:6a:ff:dd:
                    16:f5:9a:6e:84:f1:5d:b5:c3:82:e8:fa:a5:93:16:
                    b6:20:b7:cd:60:f6:2f:d0:84:97:c8:63:70:4c:c8:
                    ec:b0:db:db:6a:a7:0b:c1:35:6d:41:f4:ec:ce:f0:
                    6f:6a:7c:12:32:05:07:aa:8e:6d:0e:06:56:5e:ff:
                    cb:22:ba:9f:86:45:4b:c8:87:15:09:9d:d1:5e:24:
                    57:c8:c5:1d:86:3d:af:2e:6d:94:b6:ad:ca:ce:c5:
                    a1:4f:6d:26:cb:5e:58:e3:ad:d6:f1:6b:ee:35:33:
                    2d:a5:f1:1f:44:0d:6a:4b:69:6c:05:42:9a:6e:d5:
                    c4:53:b9:a8:aa:d0:cf:2b:03:83:5f:e7:34:1c:11:
                    0b:fc:d3:ac:e8:96:ce:e0:da:c6:a4:c9:6d:53:3a:
                    5a:06:60:07:8c:ad:d5:5f:88:6b:90:bd:b8:b0:08:
                    76:49:67:89:98:be:b3:b5:9f:cf:c0:d9:1f:64:3e:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:08:1F:C8:A7:18:0B:C5:45:47:6C:B4:ED:0B:A9:2F:88:BD:70:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:24:fb:f8:07:74:f5:37:13:4c:5f:37:77:a4:1c:d2:22:
         a1:94:08:dd:11:0a:12:46:80:f3:32:0a:3e:eb:df:41:89:fa:
         08:fe:ec:13:e2:d9:ba:12:c8:8d:66:9f:fa:31:a5:6c:9b:9c:
         b7:06:eb:b2:2c:b9:72:87:df:c4:e6:44:a6:95:d6:01:73:37:
         a0:52:5a:d8:81:a6:49:6c:ea:f9:57:a7:2d:f5:d8:60:d9:41:
         9a:00:25:d6:92:7e:2f:5b:63:1c:aa:f5:d9:49:48:39:d6:8b:
         e6:ac:8f:aa:95:d0:b5:ac:49:63:ed:02:97:fa:a8:62:47:7e:
         43:c0:49:af:5c:47:c5:b2:16:e0:e9:4b:02:e4:d9:86:18:27:
         4b:ce:ae:07:25:dc:7d:64:6f:26:99:1a:20:30:d3:1a:b8:88:
         f3:0c:18:d2:55:b6:da:a6:3b:ba:f4:6c:96:91:51:91:d1:6f:
         2c:9f:d9:9f:92:4f:40:89:48:8f:30:be:79:5f:b2:23:c8:17:
         94:54:e4:c8:f7:54:51:f5:f1:17:5c:bd:fb:fa:56:21:2c:63:
         13:3d:7d:03:a5:6d:4e:7f:30:8b:0f:db:91:65:6f:8b:f4:a8:
         64:ad:1a:31:f1:22:44:f4:ef:25:b0:4f:6a:9f:7f:90:a6:29:
         d8:d5:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:22:39 2025 by rpki-client