Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
File:                     726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa (raw, json)
Hash identifier:          /xIQS154LxhvXpoOWymS9mw4TixYSeVUHpKjBnlE4Zo=
Subject key identifier:   12:4C:93:D9:86:98:D0:F5:4E:D9:74:9C:28:9E:5F:0F:05:C9:40:3B
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75CC873AE4137C878B080
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5c:c8:73:ae:41:37:c8:78:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=c02bc9a8-e4ab-404e-a66f-062c9cb3929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:10:95:be:08:08:26:05:2e:df:c6:64:0c:
                    bf:6d:7c:a3:c9:4f:05:13:c8:ae:b6:62:7c:29:5e:
                    4e:31:51:ed:31:e7:11:0b:09:e2:bb:e1:82:a3:79:
                    11:bc:98:37:f7:47:aa:cd:c6:80:5f:88:e6:15:ad:
                    cc:08:f0:57:af:50:72:c6:e2:0a:e0:9b:b4:c7:8e:
                    57:80:51:6f:27:37:45:40:84:27:3d:4a:56:48:a0:
                    29:c3:2e:05:1a:ce:59:e6:54:17:a0:35:38:e7:98:
                    f8:a9:7b:d2:d4:a7:4c:12:04:bd:64:b2:0f:60:e4:
                    af:c7:27:8c:84:a3:9c:a4:af:3b:74:bb:4b:53:c4:
                    98:28:c4:23:45:65:f7:f2:b8:bd:a4:e6:b4:3c:d0:
                    b3:18:20:3d:a7:df:2f:d8:01:78:5f:79:56:0f:22:
                    3b:6c:99:a7:af:f0:64:13:91:3c:9e:6a:24:77:95:
                    5b:e2:85:0e:63:ba:69:e8:95:1b:da:b1:e3:2c:11:
                    11:7d:35:79:9d:9c:51:c4:cf:69:55:23:60:7b:7d:
                    a7:ed:d9:ec:aa:6e:c9:af:96:be:b7:82:17:90:d9:
                    49:fb:0f:52:11:1b:18:39:0d:57:4a:ea:5d:e3:1e:
                    6d:bb:8d:bd:08:82:05:05:d5:8f:f8:ad:d9:2d:f5:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:93:D9:86:98:D0:F5:4E:D9:74:9C:28:9E:5F:0F:05:C9:40:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:12:2f:dc:29:b8:a0:36:e2:e7:38:4f:a2:aa:72:29:f5:
         81:c0:99:4b:8b:c1:19:a2:fb:eb:b4:8f:38:15:0d:e9:94:5d:
         a8:15:be:4f:57:00:d3:64:75:7a:42:25:58:3e:2e:39:e5:8f:
         98:d4:1b:7f:cc:5c:22:1f:24:c7:1d:5a:27:32:d0:87:2d:83:
         c7:60:ed:e0:60:dd:e8:84:db:8e:e0:33:a9:21:f7:f2:41:60:
         47:03:9e:1b:51:63:27:2e:f1:25:3d:cc:f3:2c:76:92:57:18:
         90:70:b8:aa:23:74:1c:70:b9:9c:9e:0d:a2:2b:18:bc:f4:ef:
         df:50:0f:30:66:74:64:8d:97:1a:01:71:3b:9c:e4:42:65:70:
         05:d2:6f:54:9f:7c:d3:5b:cd:59:66:11:b5:08:f0:db:16:2e:
         80:5f:14:be:d3:6d:da:e4:72:e8:a2:7e:6b:17:ff:7d:d8:d0:
         a1:a2:e6:40:c6:ff:09:35:4a:99:a4:5f:3c:ba:f7:4a:45:b6:
         e9:da:94:91:51:a7:3f:5c:2e:cd:5c:c8:d0:58:cc:50:6b:78:
         68:76:29:fb:31:18:4f:00:0b:7e:ed:16:04:a3:99:a9:d5:95:
         83:8e:99:07:50:82:50:08:47:16:e6:2f:b3:bc:dc:47:36:d6:
         92:40:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:35 2026 by rpki-client