Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          8goQWPhfj7jGgpe/46+5YUnvYDNnLKvPARcXH4AoRHU=
Subject key identifier:   DD:98:6D:F8:49:D8:C0:A1:A4:35:F0:59:5A:F0:F4:2F:74:8C:F9:2C
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B196CC07B35652EDB000
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b1:96:cc:07:b3:56:52:ed:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=ac100df6-0da8-4077-a98c-73ebf1c34ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:dd:65:63:9f:b6:9a:7e:0e:ca:aa:34:02:
                    e5:e0:70:86:c0:a4:c1:d3:a5:a6:68:42:9b:31:3e:
                    4a:39:20:70:68:ae:cd:c1:ed:5f:59:58:9f:57:53:
                    4c:af:58:53:03:57:0c:03:c4:a5:fe:98:8a:aa:42:
                    f6:72:60:b6:91:22:65:1d:af:81:a3:bd:eb:fc:75:
                    95:61:9e:90:8b:6b:d1:dc:f1:1f:20:6f:c7:a5:56:
                    dd:ab:45:b7:ca:4f:ba:31:7b:cd:34:b3:82:6f:f9:
                    59:b2:bf:d6:bd:83:c8:2d:67:94:2d:33:2f:bc:a6:
                    a2:30:e4:eb:61:9b:ae:5b:6b:09:ba:d4:6a:1f:86:
                    cb:c2:23:ec:4f:c1:e3:86:b8:4a:27:19:41:01:cd:
                    44:03:8b:ee:c2:09:1f:1a:13:26:e0:a9:d7:e9:30:
                    b1:6d:0a:35:70:c4:8e:c1:c1:55:41:ad:23:af:0d:
                    21:1e:4b:4f:ad:d1:04:55:49:2b:12:04:da:67:e1:
                    6d:5e:10:44:61:4d:2d:97:62:96:f4:a1:75:c0:54:
                    87:09:26:d4:f0:9f:b7:6b:dc:7d:07:d1:29:88:9b:
                    b8:9c:68:96:6a:da:f6:8e:a8:2f:45:b3:2c:78:bb:
                    a2:b8:71:ef:cc:e1:9d:bb:81:09:58:3a:a3:ae:4f:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:6D:F8:49:D8:C0:A1:A4:35:F0:59:5A:F0:F4:2F:74:8C:F9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:70:d8:e0:18:7e:51:37:10:a6:46:d2:d1:40:10:8d:49:c2:
         7e:1c:95:f3:af:ec:c8:01:f8:c6:74:8c:c9:f4:fb:67:62:40:
         20:b1:a8:54:5e:c2:a9:26:44:ce:6e:bf:c0:5d:d9:18:98:ca:
         96:0f:ca:b5:1c:b6:c4:65:05:8d:4d:03:23:8b:03:ba:b6:03:
         83:af:f6:65:0d:f1:4c:3c:cf:13:04:ba:6b:8a:50:57:bc:26:
         29:cb:01:8a:f2:66:00:41:33:2c:2d:59:e0:bd:e7:7d:56:6c:
         8c:85:31:cc:03:f0:0a:80:16:75:ce:f2:08:10:ee:f2:16:ac:
         1a:af:e9:54:15:61:c8:41:8e:d8:88:d0:7e:7b:8f:a7:47:a8:
         cc:76:19:13:c2:ef:ce:a3:43:46:9d:e4:bf:94:3f:60:05:c4:
         47:47:3d:3d:3d:bd:70:e7:bc:32:fe:ee:45:af:f5:ea:e1:7d:
         d8:66:ce:bc:d9:eb:20:4a:aa:ea:ff:2a:f7:3a:47:3b:c8:34:
         de:ea:d8:ef:23:63:e0:28:a5:4c:a4:ec:b9:4a:eb:a4:b6:71:
         42:be:ad:b1:0f:f4:4d:38:4d:37:5b:bc:52:62:f1:ca:aa:f7:
         ff:78:24:b3:25:d2:f7:fc:e9:22:8c:16:0c:35:f2:cf:71:5c:
         7f:02:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:14:33 2025 by rpki-client