Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
File:                     3ad9341e-9252-312b-87e8-71586b49f810.roa (raw, json)
Hash identifier:          H1ir/nt7n2P9LfNaC08a2lhqR0esN1636aKOyN+S2og=
Subject key identifier:   75:98:CD:D7:F6:25:57:55:F5:26:3C:48:FF:EE:FC:32:84:CF:F4:1F
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584CF2BCEB1F234B410D267BC300
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     15267
IP address blocks:        2605:3400::/32 maxlen: 32
                          2605:3400::/33 maxlen: 33
                          2605:3400:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:eb:1f:23:4b:41:0d:26:7b:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=5f6f9afd-14da-41f2-9a39-1e5a1cfde302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:23:59:ef:70:98:13:fc:4d:28:ba:d0:2d:
                    e9:9b:59:aa:ce:34:25:54:84:2f:27:c4:09:df:e5:
                    62:84:b4:78:8a:2a:71:81:14:58:f3:ea:f8:5d:18:
                    41:93:6e:58:bb:a5:c0:28:68:4b:2c:a2:12:92:6e:
                    4a:b1:f2:a5:bf:b2:84:6d:84:3d:4b:fb:e2:85:a8:
                    1b:db:38:5f:8f:f6:f9:e3:4f:8f:54:cf:40:b5:e0:
                    7b:cf:37:e1:85:b1:35:e4:44:20:df:fc:e5:fe:b8:
                    a4:a7:be:0f:fc:f1:c0:ad:4b:57:95:91:2a:de:0f:
                    ec:bb:41:f4:57:ba:10:12:38:8d:f0:52:f0:1a:31:
                    f9:48:2d:61:79:f2:c9:c4:6d:e1:da:48:93:04:d7:
                    2d:a9:a2:57:71:a3:b4:61:88:e9:aa:b2:b0:d8:24:
                    2b:80:ee:a7:62:73:7a:94:64:cb:76:70:31:52:e9:
                    35:a8:2d:23:e6:87:ef:a4:30:f0:e1:89:7a:01:f4:
                    91:45:a6:05:cf:40:1c:8a:d9:66:80:83:ea:a0:47:
                    d2:2c:7e:a6:65:ed:e1:5c:58:5d:01:da:f2:fb:55:
                    d6:27:aa:64:f0:af:27:05:67:af:76:34:94:8b:9e:
                    a0:d7:25:c1:32:8a:46:d5:35:1c:97:04:39:1c:6d:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:CD:D7:F6:25:57:55:F5:26:3C:48:FF:EE:FC:32:84:CF:F4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/3ad9341e-9252-312b-87e8-71586b49f810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:fb:6d:a2:b6:74:63:76:b1:b9:81:81:95:cd:f6:3d:1d:
         1d:3a:e2:0c:5e:f1:2c:c0:33:c5:58:3c:ed:d8:36:b0:2f:35:
         b7:89:52:27:a9:15:d4:9a:3e:ee:32:b6:5f:e2:7d:e2:62:39:
         d1:c5:cf:8c:e6:c3:12:42:65:4e:66:c2:2b:ae:80:7e:9d:5c:
         c6:8a:99:23:0d:8b:3d:8b:b2:6a:e6:57:f2:50:e7:dc:46:ef:
         ec:b6:2b:ed:4c:f9:50:b2:26:96:e7:7f:89:22:ec:04:b8:2e:
         bf:d5:ba:a9:52:da:7b:3d:d6:cf:e1:08:c7:49:0b:bd:28:d0:
         4a:5a:27:56:e8:e9:d8:33:52:a9:b7:2c:4f:8c:d3:23:b3:07:
         e4:d6:de:42:0b:00:0a:8a:c6:d0:23:6e:5c:bb:a2:24:02:67:
         09:8d:3e:b8:bf:71:9a:58:75:e1:90:44:32:53:2f:e6:f9:13:
         59:5c:bf:5b:5c:3d:5d:ba:10:59:8c:1f:9a:0d:38:03:fa:d0:
         54:7f:bd:74:c3:4e:e1:f7:c6:16:cc:57:67:51:f8:04:f9:72:
         c6:90:dc:eb:22:d7:05:5c:2a:15:c0:69:44:5d:37:5f:42:25:
         5f:27:ef:37:4c:69:68:f9:fb:05:b5:d4:a5:62:a4:78:97:2d:
         18:9d:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:35 2026 by rpki-client