Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa
File:                     3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa (raw, json)
Hash identifier:          ZJ5PZJrommrC3icvYq9CeSsnNwjYFivxZMT3FKRYcWo=
Subject key identifier:   88:46:68:D7:37:B0:52:11:45:F9:79:4F:3C:E5:94:6B:DE:49:79:DD
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F4328584CAE573C3DFFF904C0EEAD1600
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33234
IP address blocks:        2604:f100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3c:3d:ff:f9:04:c0:ee:ad:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=09dab724-5bcb-497e-a45d-c964bf9bc505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:3f:d8:15:6f:51:5b:fd:24:37:36:de:8a:
                    71:da:ef:aa:df:08:d7:e0:61:85:4b:b4:77:53:b6:
                    6d:1f:fa:68:d0:77:e6:50:74:ed:ee:f1:80:c3:09:
                    58:c4:60:1f:77:8a:62:b4:2b:03:79:07:7d:8f:35:
                    9d:a2:44:10:f2:bc:2f:9d:bb:03:a5:90:0c:ef:47:
                    fc:b4:c7:69:71:e4:df:0c:79:c8:60:32:0c:6a:d4:
                    69:da:b6:f7:cb:1c:c4:6f:2d:dd:8d:f3:35:ca:3b:
                    f2:40:25:a8:53:ef:f1:27:54:c2:cd:9d:68:49:6e:
                    ef:19:8d:a6:98:55:f4:f5:25:e3:bc:63:76:da:d1:
                    68:93:10:28:81:38:7c:a0:7d:16:25:b1:90:a8:29:
                    a3:58:bf:6c:ab:71:05:8d:2d:e9:66:54:44:d3:ac:
                    93:01:65:25:35:d2:df:07:9c:f3:91:27:25:c8:62:
                    72:f3:6e:1f:ee:85:43:81:2a:6e:c9:c2:c7:29:2b:
                    84:4b:65:17:25:02:b0:1f:26:30:95:19:69:22:f8:
                    28:ae:6d:4a:06:b0:a3:8f:c8:54:8d:ce:81:a6:31:
                    7f:23:9e:67:0f:de:15:54:67:b1:3a:ee:31:57:e3:
                    82:00:dd:b3:f5:17:d1:5e:e5:6c:ae:2b:13:62:08:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:46:68:D7:37:B0:52:11:45:F9:79:4F:3C:E5:94:6B:DE:49:79:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/3d1d02b3-5dcd-30dd-845a-3c0b597f9441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:85:ea:ea:e4:03:fa:09:82:c6:12:5e:85:66:e5:f5:d9:
         bf:43:c6:4f:a2:7f:85:7d:ab:54:2f:20:b0:3e:56:a2:94:52:
         fc:65:26:80:78:45:d6:28:90:71:ad:42:7b:59:3d:90:9b:37:
         6a:81:1d:39:07:a8:3c:12:c1:9e:0b:48:7b:ff:f8:bf:45:61:
         72:8f:3c:83:60:96:7d:a8:87:38:e0:c4:42:fc:d7:26:9a:6c:
         55:3a:7c:1b:c2:59:79:7a:81:71:e0:54:ca:be:57:ae:60:52:
         e2:d8:46:ff:11:d4:b2:08:75:05:5f:14:8d:82:6f:b8:41:e9:
         c8:9f:a6:9c:62:d8:5b:f6:63:94:2c:41:cc:49:bf:68:fb:e8:
         c2:a2:76:b5:35:01:79:b2:a0:76:0d:81:33:12:55:0c:11:e1:
         5f:92:1c:e6:0d:20:b6:a0:ab:0c:4c:de:e3:5b:69:cd:d3:50:
         be:87:0f:b5:21:56:b3:fc:f5:ac:36:91:95:99:65:1e:e0:0c:
         b0:b2:89:de:54:68:62:88:40:e3:a3:b3:67:fa:06:41:17:71:
         c6:fa:37:aa:6c:62:af:25:43:fd:40:c6:3f:cf:b4:c8:06:78:
         d7:73:5f:b2:5b:ac:b3:13:3a:a0:99:42:d6:19:9b:62:63:1a:
         28:74:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:10:48 2026 by rpki-client