Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
File:                     70cfd91f-a721-3c04-b698-d8f19e4a2103.roa (raw, json)
Hash identifier:          G/zuktdE+yv0XIXMqJMLeqM6l+YmrPS/sGsyfCp9xAU=
Subject key identifier:   68:2D:89:12:4A:42:5D:B8:14:9D:A3:91:2D:4E:E1:85:CD:81:66:A4
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED161BE611B355B6F311E6
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        2606:a100:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:16:1b:e6:11:b3:55:b6:f3:11:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=59d04ba3-db6e-41be-ac4d-db0752b5722f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:1b:4a:5d:3d:74:8b:05:03:d2:61:4b:d3:
                    33:68:2f:f7:44:72:cc:e7:f8:c2:13:69:fa:2d:a7:
                    a6:5c:a1:4f:ea:c7:11:8e:3d:11:c7:aa:2f:a0:3e:
                    24:a6:76:a5:25:7a:b9:a3:96:0b:24:b5:d8:eb:c9:
                    47:37:85:56:72:96:37:6a:c1:7f:b5:2a:6e:41:5b:
                    fe:b0:62:08:05:ef:15:ea:4c:6a:58:16:bc:47:61:
                    fc:ad:4d:40:4b:cb:ca:d3:74:79:5b:51:e3:43:07:
                    ed:49:1a:a6:2b:7b:75:da:7d:61:d6:7f:0c:22:2e:
                    e2:ba:d3:54:a0:17:9a:e3:a6:1a:c9:1a:25:74:c0:
                    33:3c:c6:f0:2f:df:49:32:52:ee:83:80:86:df:d0:
                    51:df:79:4f:e4:1e:ad:1e:da:ff:44:48:ac:c8:71:
                    30:5c:da:67:55:da:c4:8a:7c:dc:84:40:19:fe:2a:
                    c5:8a:e5:8b:7a:40:c5:f7:76:71:86:b9:74:19:1e:
                    cb:dc:c8:6e:d5:be:a7:72:06:d3:93:68:18:14:93:
                    8e:58:9e:ff:9c:41:b5:c1:63:91:23:02:ef:af:9f:
                    e7:1a:e0:c2:1f:60:45:45:a8:33:59:0a:ee:47:df:
                    7e:36:8d:74:17:06:a8:e7:f7:be:e0:b5:19:f4:c0:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2D:89:12:4A:42:5D:B8:14:9D:A3:91:2D:4E:E1:85:CD:81:66:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:a4:88:d4:18:d0:a2:98:90:0f:ab:f8:8e:5d:ec:6c:dc:
         98:25:24:ea:6b:34:1e:05:09:80:cb:23:21:34:f4:4a:3e:4e:
         47:58:c9:5f:9f:0f:2a:bc:f9:a7:dd:c2:6e:c9:38:f9:5e:5f:
         5e:ad:3e:de:b1:aa:19:c3:20:ed:ae:3d:ab:e8:9f:36:6f:28:
         a8:f8:84:55:28:cb:d6:d6:c9:ac:45:c1:c9:b7:e4:e1:bc:17:
         85:62:76:34:f2:be:d8:b9:c8:4b:8a:bc:9a:81:62:8c:8b:bc:
         d9:fc:37:a1:ea:90:7d:87:d3:43:9d:62:8f:85:94:ac:4b:61:
         e9:e1:cf:14:74:10:70:0f:f4:66:20:26:f7:32:eb:50:a2:01:
         9c:fb:b3:11:a2:8e:ea:c7:c8:7b:aa:72:cb:09:84:47:14:48:
         84:77:09:07:0c:23:de:e7:7b:21:e4:2e:36:1e:db:bb:3d:6a:
         01:b5:62:44:a8:f4:c6:30:eb:f6:e4:36:49:5f:07:3b:3f:99:
         ad:84:56:d9:1a:93:fe:21:5e:30:ed:c0:bd:db:38:ea:39:c6:
         a6:89:e6:09:b4:1c:8d:97:12:e7:21:b8:09:c8:ff:b6:89:3f:
         c9:2d:9c:3c:d3:db:e4:19:62:c9:d4:e8:1b:15:29:46:b0:26:
         2d:4c:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:07 2026 by rpki-client