Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa
File:                     7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa (raw, json)
Hash identifier:          Jm1JsLcV9edOu9rzgaBI1UZdQhyCkepciPN9NyQ9Aqk=
Subject key identifier:   6F:E2:34:69:13:69:71:8D:88:53:62:58:35:62:03:7D:37:F7:0F:AE
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75D379812E9EB72B15780
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5d:37:98:12:e9:eb:72:b1:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=25682e44-48ef-4cb6-9d76-64707a4a8355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:77:1f:70:a0:32:16:9e:28:cd:9a:72:1e:
                    d5:1b:67:1a:7d:e9:06:34:54:5f:c6:53:4a:7c:72:
                    68:8f:e6:d2:c3:de:ac:b3:a2:8e:94:58:54:a7:81:
                    14:54:8c:be:f7:e5:f9:a1:86:c9:a0:ef:55:35:39:
                    2a:15:5b:f0:0b:96:cd:28:a5:23:7f:5f:f2:c1:04:
                    6b:b4:3f:db:03:f4:98:1f:12:9b:9f:9b:56:11:9e:
                    34:ab:53:db:12:7d:f2:93:6a:79:7a:be:d6:9e:61:
                    30:cf:c6:c0:bd:0e:47:df:09:2e:39:d6:59:5e:93:
                    e7:4c:fd:5b:79:87:7a:80:56:17:72:5a:9c:1b:f6:
                    50:21:c3:c1:83:45:e5:96:e1:28:98:1a:cc:6d:71:
                    08:3a:94:0c:76:52:d5:38:ae:35:ec:df:24:a4:09:
                    71:58:a7:ea:f3:71:74:93:eb:43:9e:18:ce:73:eb:
                    67:1c:81:47:52:7e:71:33:5d:74:f2:34:a5:15:e4:
                    b3:44:af:41:c4:2c:4a:97:cf:27:9d:c7:44:1d:23:
                    09:dc:a8:55:13:a1:fb:8d:0c:74:ec:1c:aa:d3:00:
                    0f:66:be:5c:e6:60:ce:81:82:77:bb:6d:b6:7f:dd:
                    f0:98:6f:00:a4:90:ab:99:4a:7b:d7:65:3e:0a:4c:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:34:69:13:69:71:8D:88:53:62:58:35:62:03:7D:37:F7:0F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7ad7382a-a0af-334d-af2c-ad4cc40b1d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:bc:e5:21:32:75:d9:69:0c:e7:d3:0e:96:4b:87:e7:5b:
         4f:1f:13:db:0f:cf:4f:28:19:fd:bd:8a:0c:c0:81:bc:d8:47:
         96:bf:a4:af:1f:8d:2a:3e:64:2a:a8:3a:3f:b8:84:bb:e6:81:
         8b:51:e3:dc:9e:16:f0:1f:a3:03:b7:c7:3d:5f:5d:1b:19:fe:
         25:22:6a:1e:ac:2c:4d:e7:08:b1:8a:28:fb:76:8c:96:0e:4f:
         d4:28:97:cb:16:e9:7a:94:91:08:45:56:08:74:18:7a:af:8c:
         9c:b1:74:80:5a:47:c2:ed:f3:72:07:3e:a7:1f:47:7b:4e:e7:
         94:c7:4b:3d:e9:47:49:67:fa:2a:1b:33:03:f1:8a:4e:51:da:
         88:b3:76:19:85:36:45:a6:a7:09:4d:07:8f:37:d6:52:a3:b4:
         12:b5:4a:d3:0f:89:76:1e:52:c0:86:c9:09:c5:5c:81:d5:1c:
         e1:35:d9:b0:77:cd:33:9e:47:62:2e:ea:d7:ee:3c:93:81:0a:
         15:2c:57:da:98:c0:b7:1f:0e:3e:0a:c7:74:14:a6:1f:bc:ea:
         b6:8b:ac:bf:4b:7c:a7:ef:ef:55:77:82:d5:3c:11:2f:d7:52:
         87:53:0b:ba:37:32:b1:04:a6:cb:c6:86:e8:c1:d9:4a:3d:77:
         9e:6b:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:21 2026 by rpki-client