Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          n9Hgq7RVaipDfeFsb6NxDv4q6xANYAP5C7Hpq+WbS2s=
Subject key identifier:   1D:D8:81:D7:DA:23:18:DE:2B:4D:F3:45:0B:B2:E9:75:A9:E4:7E:45
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75DD66B571A9C1BE36A40
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5d:d6:6b:57:1a:9c:1b:e3:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=e674b793-d8c8-4167-af1d-5aa332066c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:12:dd:8a:47:71:13:77:0c:d4:63:91:24:
                    52:65:8a:d7:f1:85:ee:b9:be:ae:49:47:3d:b9:97:
                    f0:f5:bc:e4:4e:f9:99:aa:f7:21:7d:0c:ca:8b:b9:
                    0e:ae:e3:c3:2f:d0:5d:8c:2f:aa:f1:00:9e:b3:3c:
                    06:b7:c1:20:f6:6d:4b:21:61:80:d0:b8:4d:a2:12:
                    f4:56:24:c4:d3:eb:00:2b:72:cb:60:ab:e5:4f:0f:
                    69:06:0c:f6:58:7a:bd:21:87:62:cb:74:6b:7b:79:
                    8a:ac:3a:77:9c:06:b4:70:0b:84:f0:6a:f3:67:7d:
                    ee:07:50:8b:57:91:58:08:31:9d:07:10:b4:0d:04:
                    08:fd:6d:fe:26:12:bb:a7:b6:89:20:be:0f:e1:65:
                    de:94:60:a0:c6:60:1a:d0:8b:71:a9:64:98:6d:17:
                    ef:78:37:99:cf:ca:d2:58:7c:61:1d:4e:40:be:40:
                    a5:2c:19:75:81:50:8e:9a:dd:86:a3:f3:b1:26:f9:
                    56:28:39:ca:0c:8b:75:79:67:3e:eb:34:b2:5a:66:
                    58:c1:f0:4a:ac:ae:3a:3f:de:de:eb:d8:27:e8:e5:
                    de:dc:39:51:9b:15:d5:db:6c:14:0e:ef:96:1d:08:
                    d5:7e:8f:87:77:6f:dc:ff:fc:91:10:04:61:bd:55:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D8:81:D7:DA:23:18:DE:2B:4D:F3:45:0B:B2:E9:75:A9:E4:7E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:7f:a6:69:a5:ae:1b:8e:42:2a:f2:7b:25:d1:de:40:9f:
         19:7d:ca:f9:32:00:b4:4d:9a:20:4a:b5:86:9d:11:b2:e8:5b:
         77:4d:b4:61:5d:bb:bf:8f:fe:70:41:41:54:ff:70:36:bf:07:
         a0:c7:9a:cc:5a:f0:b3:28:c7:16:ab:3c:5c:89:49:52:bb:cf:
         0d:51:cd:1b:d3:fd:43:e5:cd:b8:e0:2a:ff:7f:30:5c:07:b9:
         6c:54:56:2f:1f:54:fb:d4:22:c0:56:b2:34:45:ab:19:f2:1f:
         8a:82:63:a0:f5:17:de:5a:7f:3c:d5:55:9d:f1:b5:9e:06:2e:
         ac:70:10:84:97:51:ca:2e:b5:05:10:aa:c3:26:6b:b8:ab:a4:
         aa:ee:53:96:f5:4b:45:72:28:d2:d9:f7:51:1e:00:e8:14:3c:
         a4:5d:1a:c1:5c:6d:7c:6c:e3:25:7d:ff:94:ec:c0:5f:ff:6e:
         d9:48:38:be:23:d0:c6:1b:c6:e6:61:69:e6:df:f0:bd:ea:dc:
         f1:9b:7f:8c:00:f6:c1:f2:eb:00:95:6a:ba:4b:8d:df:da:12:
         93:7d:ab:df:a3:de:43:47:0c:9b:74:56:fb:99:6c:c1:15:f6:
         b2:12:c5:0c:11:d9:70:32:1d:b7:e1:3b:f3:cd:61:81:b3:af:
         09:fd:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:41 2026 by rpki-client