Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
File:                     70af50cc-33f5-3282-8776-d1c54551e539.roa (raw, json)
Hash identifier:          AdG117+cIjDs+ZuEWArhC/ARKM2E/XXGytKD/AQmaME=
Subject key identifier:   F4:04:71:8A:88:DE:23:E6:9C:9E:D6:4F:0D:80:E5:E0:96:94:36:96
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75DBE93A8033097F19F00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5d:be:93:a8:03:30:97:f1:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=01e3cef1-5161-40ae-9c21-eed7496dfb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:16:ec:c9:c8:17:08:6b:85:ea:3e:1c:dd:
                    c5:68:8c:ed:52:bd:a6:c1:b4:6d:3c:2d:f5:37:20:
                    e5:a7:40:03:e3:7d:48:2d:44:70:61:89:16:70:4b:
                    3f:c2:d8:83:54:d9:70:1f:99:92:e4:bb:5a:be:0c:
                    40:37:6a:0c:cd:83:48:68:df:55:0f:28:03:03:c5:
                    0f:fd:81:03:4d:36:d1:67:45:32:bd:82:46:6a:a2:
                    a2:b8:5b:81:1b:83:a6:c2:7b:ac:1e:eb:18:08:d1:
                    e4:30:a4:2b:87:8f:dc:4c:c4:27:0c:4c:82:26:1d:
                    04:83:01:e8:c5:87:2a:e3:5c:8d:21:53:87:85:04:
                    58:68:ac:35:16:c8:b4:71:62:42:1e:35:3e:a6:12:
                    7b:d0:ac:ae:f8:50:34:f8:54:1a:d8:6e:57:8d:32:
                    05:5b:e5:60:0a:68:8c:96:cd:f7:bf:2d:3f:5e:e6:
                    69:dc:88:f5:97:1b:a6:d0:bd:12:ab:12:df:83:80:
                    7d:09:5a:c9:83:be:ee:1e:2a:b4:24:c1:6b:bc:84:
                    26:92:a1:0a:19:49:5d:42:5f:3e:da:20:0e:c3:15:
                    77:d4:5e:a2:f9:cf:64:62:bb:80:42:0a:6f:ce:df:
                    2e:4f:82:57:da:79:26:58:ea:95:80:d6:d1:6b:b6:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:71:8A:88:DE:23:E6:9C:9E:D6:4F:0D:80:E5:E0:96:94:36:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:0c:fb:00:be:a7:5f:ac:71:00:e1:5e:c5:17:0b:a6:81:
         32:82:9b:32:72:2e:7a:2b:e4:33:34:37:2c:84:20:e7:e7:ec:
         52:af:26:13:58:5a:a8:bb:68:9c:85:c0:ea:8e:1f:01:f0:59:
         b6:5a:73:50:90:0a:04:07:78:d0:7a:e1:87:7f:1f:39:c0:27:
         ea:1b:94:f0:cd:9f:e4:f4:2d:0c:ec:2f:e3:6b:2f:02:ac:3e:
         a5:62:64:58:c8:0d:a6:e9:7d:d9:4c:41:60:b4:b7:bf:23:ce:
         af:10:73:1a:00:9b:3a:c2:8f:a1:4d:b1:61:91:75:69:0d:be:
         8c:90:c4:51:47:bb:5b:ae:7d:08:ab:a4:c4:c4:f7:a1:1a:02:
         ba:a5:3c:b7:64:e3:b9:c2:59:39:e5:2d:82:f1:09:6e:2f:08:
         5f:e0:56:31:bf:2a:69:5b:c1:a6:38:65:54:44:c4:c7:c7:55:
         c8:70:75:e5:7a:35:da:7b:fd:07:8d:c5:79:a7:09:1e:b1:c6:
         c0:9b:c1:1d:07:a6:fa:97:a9:39:85:3b:21:4c:8f:f7:98:c6:
         7a:6c:7a:bb:19:ef:9d:24:9a:bf:3f:0b:3c:6e:22:76:ad:c6:
         2a:64:0d:25:a0:9a:c3:c2:e2:8e:22:e9:c5:89:88:78:be:76:
         1d:a3:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:45 2026 by rpki-client