Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
File:                     726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa (raw, json)
Hash identifier:          SXwYeOAIQNClAWEtemrWQRsy3tFAo0vjjHG7DJPAZ2w=
Subject key identifier:   38:30:14:7F:BB:FC:27:0E:B0:26:63:60:FA:AF:1B:19:94:93:5A:6A
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED162A03E8D8131D66C280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        2606:a100:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:16:2a:03:e8:d8:13:1d:66:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=d0379d06-3d99-4925-9934-793556f71c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:ec:6a:d8:dd:a6:01:3c:64:06:2e:72:54:
                    f8:24:5e:9c:a6:b0:c1:71:e1:da:63:f5:8a:74:b8:
                    7e:78:fe:da:55:b8:28:e1:95:eb:02:02:e7:fc:ea:
                    64:0a:f1:4d:bb:85:67:0b:83:7a:bc:37:ca:f0:b7:
                    c0:53:9c:39:66:75:32:b8:e8:6b:00:e2:0b:29:17:
                    85:16:04:1e:39:17:7c:85:b5:ce:d8:b7:76:69:a8:
                    5f:b8:38:80:d3:3d:8f:cb:ed:f9:15:a3:0e:7f:02:
                    08:2c:ec:81:4b:e2:9b:56:e1:b4:a0:9f:c2:34:01:
                    86:dd:a8:04:72:ad:f0:9e:8a:6e:7e:68:16:29:c9:
                    cd:ca:47:28:03:fb:c3:3f:c0:b8:73:38:d3:11:05:
                    6b:83:fe:7e:1f:17:11:d9:3b:ab:79:92:db:0f:4f:
                    e3:b7:43:da:13:ca:f0:1e:dd:39:1e:11:e9:b9:db:
                    c7:ad:4e:e5:d5:54:ae:54:4a:c1:3c:67:e2:d4:5c:
                    23:65:cd:b3:7e:e9:0e:33:39:56:06:03:db:7f:8c:
                    af:85:14:90:40:21:81:77:3d:2a:67:a3:2b:cb:05:
                    af:8b:8a:02:a8:84:3b:2a:2a:3e:7a:c8:d6:1e:7b:
                    23:39:c1:a2:4d:b1:0f:bf:46:91:9f:11:49:23:86:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:14:7F:BB:FC:27:0E:B0:26:63:60:FA:AF:1B:19:94:93:5A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a5:32:1f:8f:6b:c0:f3:68:db:ee:2c:7a:f8:76:82:cb:6c:
         a2:6a:59:a2:db:e7:b6:eb:8f:a4:b7:6f:e9:3f:fd:40:83:dd:
         48:d2:1f:06:ff:8c:16:55:59:99:c0:4f:50:ea:b7:3d:82:15:
         ef:33:0d:c1:a6:e8:6a:2e:d2:07:5c:03:30:1e:a8:5a:4f:a0:
         59:13:3b:52:00:5e:33:66:06:78:3c:be:be:53:aa:45:78:a7:
         45:ed:0d:20:af:cb:2f:2b:29:22:d1:b6:86:3f:2c:94:98:f4:
         80:ab:ca:dd:68:df:76:22:fa:ac:29:76:6a:b7:05:75:d0:f0:
         69:ec:73:13:ac:e2:eb:87:61:c6:10:0c:65:f0:e0:93:8a:30:
         f2:8d:83:72:47:62:4e:01:d4:25:8e:45:f0:0d:3e:77:c1:ac:
         df:76:65:25:5b:a2:11:b3:5d:7d:27:c6:aa:74:dd:7a:36:44:
         b5:2d:3b:d7:dd:6b:a6:e9:82:a1:14:4b:e8:35:7b:c5:d9:f1:
         1d:fe:50:29:ae:20:ca:60:ab:4e:e2:e9:f3:16:9b:f0:98:75:
         ed:ff:f7:3d:bd:10:af:4e:cb:0b:59:3c:44:22:a6:e8:ca:10:
         50:01:65:36:a9:0c:84:24:86:8d:d4:a5:82:89:1d:b6:0d:f2:
         1c:26:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:33:47 2026 by rpki-client