Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa
File:                     da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa (raw, json)
Hash identifier:          GU3m+udId4KhbQNPI4Gq5d+YOHzhXgMu7thxB0fAl1w=
Subject key identifier:   A0:DA:14:19:74:78:07:BF:50:C0:58:1C:2A:32:F9:E1:7E:76:81:6D
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED16519920D01FD4E7C600
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        2606:a100:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:16:51:99:20:d0:1f:d4:e7:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=1043690c-56c4-4557-8c16-6f08c3696100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:ec:1b:a4:ac:da:88:ae:c9:34:26:7e:a3:
                    90:fe:ef:95:6b:ab:95:2a:45:41:d1:be:d8:a0:e7:
                    60:36:60:fc:b7:c8:1c:02:c6:7f:23:f2:f2:8b:f9:
                    da:f8:6c:b6:3f:34:95:39:a6:6e:45:c8:22:d0:6b:
                    28:3c:6c:25:87:14:cb:ab:19:95:9d:38:5d:1c:9f:
                    67:d6:97:2b:1b:99:d3:9f:95:27:a2:b3:f6:50:66:
                    50:86:cc:da:76:4e:2b:ac:03:29:d7:d4:0c:6c:fd:
                    c0:07:0f:80:64:59:83:ef:f7:d8:26:72:e4:24:91:
                    35:a2:3f:30:5d:aa:55:13:44:11:5e:18:25:0a:9f:
                    ee:56:42:1c:f6:35:c2:d8:00:bf:e5:36:70:14:4f:
                    25:45:79:01:a1:f8:ae:57:1b:e9:6d:9c:54:68:91:
                    12:a3:16:d7:97:80:f7:15:52:70:63:fb:cb:65:59:
                    c5:75:e8:8b:b8:16:a3:29:73:03:ac:d8:0c:fb:47:
                    30:af:2a:7b:3f:9c:43:13:b8:e0:76:d6:20:98:07:
                    9f:64:b8:ba:04:29:b9:0f:45:02:86:4c:a4:ff:a7:
                    1a:9d:29:01:b0:64:df:59:0c:b8:69:0b:3e:8d:74:
                    84:74:4c:13:ef:d8:d8:51:66:5b:24:b8:47:b4:ea:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:14:19:74:78:07:BF:50:C0:58:1C:2A:32:F9:E1:7E:76:81:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:f8:f6:77:eb:5a:f4:df:88:3f:5d:56:76:82:1e:95:a4:
         3a:2f:ed:60:33:ba:0f:96:fd:61:1c:1b:54:e2:d2:83:1c:00:
         91:7e:30:c0:d5:a1:b4:aa:f6:c2:61:55:d5:95:36:c5:02:62:
         6e:d2:ec:17:b6:b6:68:f1:7c:9b:d4:6b:08:47:3c:d9:79:d2:
         f9:32:be:ee:1d:3b:f8:be:69:e9:48:c9:e3:ed:68:c3:f6:38:
         69:77:4a:d3:a8:a2:a2:52:01:c6:98:2a:79:77:8c:5d:35:3b:
         2e:61:37:7e:54:71:74:83:97:a9:94:d8:ea:c9:8b:f8:4b:54:
         fd:58:ec:ae:03:8d:93:84:e8:8d:2b:9b:9f:fb:60:47:49:10:
         2c:11:f3:36:76:87:06:07:38:82:61:2c:0f:59:90:b5:c0:b0:
         e8:de:a4:a6:05:a3:8d:f1:e2:ac:bf:18:b9:89:89:1b:72:fc:
         83:31:0c:b7:b6:55:be:25:e0:1b:f7:c7:e9:b4:b6:a1:60:61:
         2f:60:5b:4c:a2:e6:21:1e:a0:08:d0:c6:28:a6:3a:6f:bc:30:
         b2:34:c1:0d:6e:ab:61:89:7d:7a:8e:39:6d:fa:30:b0:a1:0e:
         29:b0:a7:97:f1:2b:ef:08:b2:0a:90:b0:ab:be:32:2d:1d:d8:
         ab:69:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:07:08 2026 by rpki-client