Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
File:                     7aff9897-1698-329b-9320-a0c99cd37822.roa (raw, json)
Hash identifier:          iAh2GozRRusW3C72Gkkk4bHr8e9NW6juLnB+aVHL4pM=
Subject key identifier:   D2:C0:57:0C:6B:C1:DD:E7:A0:A7:F2:FA:22:F1:39:F2:7D:CF:9D:CE
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75C85407F20EC8C6A5980
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5c:85:40:7f:20:ec:8c:6a:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=3f2ae804-5b15-4d7d-8a78-64eb9c820aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:8e:19:e5:dc:b3:d9:dd:41:3a:ee:21:43:
                    62:03:d8:7d:40:ba:9c:e2:4b:d3:3f:bd:3b:1d:59:
                    91:1a:7a:d8:61:3c:54:8a:54:51:5a:eb:4d:b5:bc:
                    00:05:94:c0:0b:6c:71:a2:76:b5:79:e7:68:22:38:
                    3e:08:47:42:f7:e3:71:86:1c:bf:26:b8:ee:99:17:
                    6a:28:7f:84:2a:f0:d2:03:b4:81:a1:8c:c6:e6:c3:
                    1d:13:04:bb:43:4d:1c:68:a3:5b:de:9e:23:00:18:
                    62:ac:e3:82:40:d2:67:2d:ef:8c:a2:ab:ba:17:38:
                    d4:4e:ab:82:61:fc:73:42:a4:db:c7:d7:85:b4:c8:
                    dd:75:d7:f4:6e:c6:85:e9:66:3f:6e:3d:67:8c:9e:
                    8a:b9:ae:60:5b:38:3c:a8:a6:23:51:8b:f6:28:c7:
                    b8:cc:17:cb:e4:3e:97:c0:7f:4a:3e:51:a1:52:60:
                    6a:4d:56:72:57:ec:c7:c4:8f:d9:33:f4:77:cf:76:
                    6e:dc:7c:be:30:85:e5:6b:54:15:6e:37:09:26:bf:
                    c4:40:85:ce:84:74:7f:d0:15:9e:c7:9b:d1:2b:ff:
                    96:fd:17:ff:e0:38:47:a2:da:07:57:e3:9f:34:10:
                    98:71:d0:2e:36:dc:e1:92:93:1e:37:44:47:b4:e0:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:57:0C:6B:C1:DD:E7:A0:A7:F2:FA:22:F1:39:F2:7D:CF:9D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:16:f2:8a:c8:3c:e2:bd:87:ae:f5:56:e7:83:68:3f:ef:
         a4:30:37:7c:55:27:c5:18:25:7b:1f:5b:d0:14:e9:9c:2a:86:
         cd:3e:59:d4:41:16:4c:88:50:8d:45:fd:2d:5c:34:46:26:23:
         b1:47:16:5d:f0:7f:34:ce:3a:ad:b5:35:99:e0:60:b1:40:bc:
         25:a8:a7:5f:84:10:04:68:87:56:1b:51:f7:8f:15:d4:7f:bc:
         2a:12:9c:fd:6e:1e:62:54:e4:36:37:d0:d8:94:21:84:ce:62:
         15:f2:2b:71:e2:5a:48:24:26:81:c1:3f:c6:cf:f0:a9:64:81:
         95:54:ce:5d:98:fe:75:08:99:5d:b7:ea:2f:db:4c:79:b7:ef:
         0c:07:b2:6c:1e:8b:e8:0e:5b:51:cd:90:24:2c:5a:71:37:a6:
         4b:a9:a7:ee:94:af:a2:3c:59:3a:c2:f4:04:ff:94:6d:22:30:
         cd:2d:bd:3a:dc:7c:3c:a9:7a:a8:16:5a:5f:62:07:73:11:54:
         95:45:22:a0:7a:22:c1:c6:ca:64:90:79:b9:7b:c7:92:44:94:
         9e:55:33:7a:ee:c7:61:34:03:af:70:66:ea:9b:14:53:40:41:
         7f:80:70:83:94:a5:a2:35:b3:3d:4b:7d:28:9c:db:28:15:72:
         fc:40:83:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzLp1yFQH8g7IxqWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
M2YyYWU4MDQtNWIxNS00ZDdkLThhNzgtNjRlYjljODIwYWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmKOGeXcs9ndQTruIUNiA9h9QLqc4kvTP707
HVmRGnrYYTxUilRRWutNtbwABZTAC2xxona1eedoIjg+CEdC9+Nxhhy/JrjumRdq
KH+EKvDSA7SBoYzG5sMdEwS7Q00caKNb3p4jABhirOOCQNJnLe+Moqu6FzjUTquC
YfxzQqTbx9eFtMjdddf0bsaF6WY/bj1njJ6Kua5gWzg8qKYjUYv2KMe4zBfL5D6X
wH9KPlGhUmBqTVZyV+zHxI/ZM/R3z3Zu3Hy+MIXla1QVbjcJJr/EQIXOhHR/0BWe
x5vRK/+W/Rf/4DhHotoHV+OfNBCYcdAuNtzhkpMeN0RHtOBpswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNLAVwxrwd3noKfy+iLxOfJ9z53OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvN2FmZjk4OTctMTY5OC0z
MjliLTkzMjAtYTBjOTljZDM3ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADe8W8orIPOK9h671VueDaD/vpDA3fFUnxRglex9b0BTpnCqGzT5Z
1EEWTIhQjUX9LVw0RiYjsUcWXfB/NM46rbU1meBgsUC8JainX4QQBGiHVhtR948V
1H+8KhKc/W4eYlTkNjfQ2JQhhM5iFfIrceJaSCQmgcE/xs/wqWSBlVTOXZj+dQiZ
XbfqL9tMebfvDAeybB6L6A5bUc2QJCxacTemS6mn7pSvojxZOsL0BP+UbSIwzS29
Otx8PKl6qBZaX2IHcxFUlUUioHoiwcbKZJB5uXvHkkSUnlUzeu7HYTQDr3Bm6psU
U0BBf4Bwg5SlojWzPUt9KJzbKBVy/ECDPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:12 2026 by rpki-client