Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
File:                     9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa (raw, json)
Hash identifier:          iK2lGtq0xADSTs6J/yEH4sfBIeEKXAEVhdX1WQgwI7A=
Subject key identifier:   F3:C2:C2:8F:F1:A9:FF:D6:5B:EC:86:60:29:89:E3:91:E6:D0:0C:CF
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75D5EA41CEFDB3CEF2A80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        2606:a100:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5d:5e:a4:1c:ef:db:3c:ef:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=6673f53e-f072-4d16-982a-9ab844c2bb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:98:f3:0a:57:f3:2b:66:e2:76:55:a7:44:
                    13:a6:58:90:e9:87:c6:22:32:ca:bc:cb:21:7a:42:
                    04:47:ca:86:ec:a4:e2:65:d7:34:84:eb:58:a9:30:
                    5c:e6:4d:5f:a7:a6:09:e4:91:e4:98:a7:26:d3:8b:
                    5c:88:ef:5a:ea:f6:ae:dd:e3:ae:f5:71:36:d4:c8:
                    e0:04:3b:ba:cd:70:26:cd:a6:78:e6:97:1f:e0:4c:
                    34:c9:a9:7b:eb:96:16:1c:39:c1:b8:a9:e4:49:4c:
                    46:30:c2:c6:29:c5:8c:bc:2d:e9:b3:c8:19:01:b7:
                    55:81:96:4e:37:09:20:ce:1a:d8:e0:de:6b:57:77:
                    b0:04:7c:3b:53:95:3a:26:d0:e7:82:09:b3:ef:9c:
                    9d:47:71:cf:f9:b3:8c:e7:5b:c6:cc:3e:ee:88:a6:
                    89:b8:8b:f5:19:8e:f3:1c:7f:29:a9:09:fc:c9:c4:
                    ec:c6:ef:a7:11:25:d5:b8:8f:e9:a0:e6:fe:9c:2a:
                    5d:47:bf:71:c5:55:d3:4b:ea:13:fb:06:a6:b0:39:
                    b3:a3:eb:22:70:6f:d6:f4:13:57:25:33:1e:e8:e1:
                    e1:54:a9:b2:9d:97:b8:5f:90:ab:fe:60:04:6d:7a:
                    d8:2f:90:bc:bf:c1:17:5e:65:42:c0:37:76:5e:12:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:C2:8F:F1:A9:FF:D6:5B:EC:86:60:29:89:E3:91:E6:D0:0C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:86:66:2d:7c:54:86:8e:59:96:17:de:ff:29:94:44:24:2d:
         92:59:f5:b7:9b:6e:d8:bd:d9:c8:03:63:a8:3d:b2:53:c7:43:
         cc:2c:ee:e4:76:26:2a:b0:d2:45:aa:57:65:81:18:f7:15:99:
         de:c7:dc:17:35:6c:63:0f:bb:8f:b6:c3:b2:89:4f:69:6b:3d:
         b9:7c:d2:f4:44:89:f4:67:5a:fd:8d:b2:7b:e6:b3:e2:75:64:
         60:87:26:c5:fe:f4:89:ac:4a:7d:d1:2f:7c:92:a4:af:b3:6b:
         3e:ff:65:45:d8:14:c9:b9:55:56:a7:6e:bf:00:c5:80:57:06:
         e6:9e:27:58:a8:f2:e9:b0:c7:da:37:96:43:61:b5:a9:ea:45:
         ae:eb:da:43:12:e3:6e:6a:68:f2:29:cc:e0:0a:18:7c:1d:7e:
         94:9f:b8:70:de:2d:10:cc:b8:4d:da:95:43:36:da:3c:0e:88:
         b4:74:43:5e:c4:cd:eb:ea:ef:af:2c:cd:94:b5:e9:33:af:ed:
         a2:b4:bf:37:ae:66:e8:41:64:f5:dc:e7:49:de:42:7f:f8:b0:
         72:be:ea:11:35:65:28:09:5f:d1:53:48:be:ce:bd:b6:3c:a1:
         48:cd:2d:a0:af:f5:6d:38:c8:cd:8b:5b:06:22:3d:37:0b:67:
         6d:22:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:49 2026 by rpki-client