Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
File:                     70cfd91f-a721-3c04-b698-d8f19e4a2103.roa (raw, json)
Hash identifier:          GC1EmehfVMBP8rc5yTCill31XxaBgl/oKUVNNAS9gpY=
Subject key identifier:   B2:2C:76:7C:5E:8E:79:14:06:D9:FC:44:47:3F:5F:82:77:8E:1D:57
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75CB45E576AE2FCBF19B0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5c:b4:5e:57:6a:e2:fc:bf:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=72255051-a967-424c-8374-d2a4f648971c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:a8:02:69:8c:fa:60:ca:86:82:a0:b9:71:
                    cf:58:a4:68:c9:a2:5f:d6:d4:98:81:75:17:07:2c:
                    99:1a:ff:0f:9e:8f:94:1c:ec:56:ab:4f:58:17:9b:
                    dd:da:d3:0b:eb:d2:5e:15:05:c3:43:7d:8f:9b:57:
                    a5:99:3c:21:28:eb:a2:2b:8f:be:d8:83:dd:01:06:
                    e9:e2:83:3b:3a:23:91:e0:c5:78:43:47:eb:c1:f1:
                    d9:94:5f:ed:ea:74:9d:5f:98:9d:77:4b:64:79:fb:
                    a7:6b:3d:0e:e5:a5:26:2d:5e:b7:8c:31:62:70:19:
                    b5:3e:9e:ac:40:06:aa:5e:0c:dc:55:7a:7c:3e:2e:
                    79:45:c5:53:54:55:25:e8:d3:0c:fb:d0:6c:f0:3a:
                    e7:0a:02:c1:bf:89:b9:58:89:28:40:9d:6a:f2:27:
                    34:40:24:d9:c9:61:1a:43:a0:b4:78:06:f2:4e:5d:
                    d2:f2:e6:0f:d6:ae:b2:6e:b7:dd:bd:f9:54:43:03:
                    f5:ca:06:02:e8:12:f4:a3:04:78:34:bb:3f:0c:8d:
                    6a:64:37:bb:8b:53:39:2b:68:44:50:75:56:01:60:
                    c5:c8:e6:0c:a2:9f:7e:35:6e:fa:40:88:6b:f9:a6:
                    f4:6a:78:f7:ee:d3:b3:c0:11:e0:17:55:ff:eb:16:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2C:76:7C:5E:8E:79:14:06:D9:FC:44:47:3F:5F:82:77:8E:1D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:b2:65:2a:27:ef:e1:b9:05:bd:77:54:c3:5a:90:72:20:
         2a:87:db:9e:d3:73:fa:33:87:8a:45:b2:9e:15:a8:0d:24:c7:
         81:a7:7b:96:9f:6e:03:c7:91:d7:8a:17:a4:d0:60:41:00:6f:
         bc:d3:56:de:56:68:38:0a:01:c1:e2:5d:fc:6d:d5:5f:ed:5e:
         75:c0:12:a6:4c:95:de:2a:6b:e0:7e:a3:30:e4:c1:6d:a4:62:
         22:a9:92:0e:9e:e9:1f:d9:84:f9:ce:86:c3:1d:d9:7c:54:9f:
         7d:e5:f6:b7:47:d7:4b:7c:df:b8:ae:4f:bd:2f:25:f9:3b:7f:
         24:83:b6:a8:69:8f:cc:aa:57:84:a1:f4:57:e9:32:08:c9:b2:
         58:d1:64:84:bb:1e:85:28:c9:21:1c:a8:1d:00:bf:3f:28:48:
         85:20:f0:9c:16:80:c7:95:c0:15:d9:88:3a:50:9f:87:f8:5a:
         03:c2:95:53:90:ff:4e:07:66:4a:32:a0:f1:79:fe:b8:92:af:
         d4:a9:c1:b5:c1:bd:51:59:c1:e7:0c:ff:5e:04:0d:b6:e6:bb:
         bf:e5:18:52:18:59:94:b9:ac:5d:42:84:39:9d:fa:bf:4e:4d:
         e3:c9:84:fc:7c:e2:09:86:c7:63:f9:e9:da:38:e5:25:9c:fe:
         62:9f:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:32 2026 by rpki-client