Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
File:                     d3660bdc-e74e-3ee0-9473-1af5c969d839.roa (raw, json)
Hash identifier:          1PHvH5vD1G2XiBmCHHOMjogmxj3LZeuq++mK3jgxrHs=
Subject key identifier:   D0:AC:20:0F:31:25:40:E6:73:7B:26:47:A7:57:F2:CC:BE:29:63:9F
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED169927E1C21F4E98DF00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        2606:a100:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:16:99:27:e1:c2:1f:4e:98:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=4bcd661b-a255-4f3f-bc5f-97f2eb2499bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:22:2f:96:eb:f9:4e:a0:c0:cf:4b:6b:c3:
                    8f:0b:1b:4c:ad:75:ac:c4:23:64:99:fd:33:cf:08:
                    20:0e:ac:ca:01:c4:c4:fa:6f:c0:07:b0:d3:f4:dd:
                    bd:b9:c1:55:81:cb:6a:f4:fc:98:19:94:e8:00:fe:
                    50:88:7d:41:f2:2b:70:ff:bd:27:a7:8f:f4:88:b3:
                    18:95:9a:c5:02:0c:ff:01:ac:20:6d:d3:00:bd:33:
                    01:07:86:82:50:a1:13:8c:99:92:c7:c4:69:89:f6:
                    ed:15:9f:5a:c9:87:40:a3:1f:ef:24:68:0f:66:13:
                    90:db:9b:71:f4:5c:7b:d2:3e:cc:18:87:b0:79:b0:
                    e0:18:48:64:9b:69:99:45:72:d5:18:e3:2a:18:fb:
                    92:44:dd:d6:51:3f:37:54:61:34:41:4b:15:4f:5e:
                    b6:cf:17:e7:46:3f:30:29:34:12:01:7d:bc:75:c5:
                    13:88:3d:a1:2f:86:52:b0:3c:68:4d:08:c1:46:be:
                    7d:64:8c:03:de:98:c3:3d:9a:5a:f4:55:51:da:05:
                    c1:f5:8b:54:e8:0f:6d:38:5a:2e:b2:aa:d2:48:dd:
                    c8:54:b6:6b:af:ce:bb:18:e3:92:8f:4b:a3:65:3b:
                    d8:98:af:1d:43:11:c2:73:76:d5:a0:5a:ab:60:b3:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:20:0F:31:25:40:E6:73:7B:26:47:A7:57:F2:CC:BE:29:63:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:f3:ed:b3:d1:2c:ed:a3:27:00:45:ad:2f:30:3a:bb:66:
         58:2b:3f:14:8c:a9:20:e6:fe:26:a9:f9:7a:58:64:be:65:1f:
         88:6b:60:b9:94:19:15:d6:2a:94:cb:0e:df:39:bb:ec:70:c7:
         ed:e0:bc:9f:1b:a5:85:37:83:b7:e6:4e:6d:f5:c1:b1:95:2f:
         f1:f4:71:6b:e2:44:a8:dc:07:f7:f2:6b:7f:1f:16:4d:08:95:
         f2:1e:eb:7e:fa:b7:c6:2c:95:10:56:7c:af:a7:cc:15:c2:f6:
         e3:ce:08:59:70:f2:ae:3a:8e:0b:dd:2e:f5:34:81:8c:bd:a6:
         06:70:fa:24:e5:9a:ae:e9:a4:8e:d6:f6:93:4b:e0:f8:1e:b5:
         f7:32:d3:1d:84:bd:5b:17:20:77:6c:2c:cf:2d:8b:b5:b8:78:
         05:d6:64:d8:6b:cb:0f:d4:37:d9:b5:31:07:d7:f4:3f:2f:2b:
         89:b2:b8:e5:a1:d9:24:aa:b9:0a:eb:7b:33:3a:83:e1:8e:3c:
         27:86:33:c5:9a:1c:0a:aa:f3:da:c8:88:a9:fd:72:bc:8f:5f:
         c8:61:fc:a7:9e:e9:ba:3d:a8:82:e2:28:4a:ff:ce:73:3e:d2:
         fe:4a:fe:bf:ca:fa:8e:c7:a4:f8:c6:9a:27:91:06:f3:65:da:
         af:82:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:02 2026 by rpki-client