Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
File:                     34f2c767-116c-381b-b77f-2c51ea9a987b.roa (raw, json)
Hash identifier:          0iniy5b7JJOAk7rDYvcxz+3vWBo6cd2aO4KDXYSeCec=
Subject key identifier:   1A:9B:2B:B4:98:58:97:42:57:83:A0:67:18:90:37:A2:E5:E4:4F:FE
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F4328584DE9B07E4A117B8C72E5F58300
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     14939
IP address blocks:        2604:5000:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7e:4a:11:7b:8c:72:e5:f5:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=9b431f3f-97ff-442a-b689-dccfb990091a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:49:57:cc:44:28:8b:10:94:7e:85:ad:ee:
                    30:86:69:c0:61:ba:f1:bf:16:f3:e3:82:35:6f:29:
                    78:3d:2d:11:ba:a9:80:b2:e2:17:00:48:f3:dd:61:
                    d4:7e:a2:a8:18:88:57:45:1b:4a:70:89:aa:e7:57:
                    1b:1e:27:6a:e5:bb:19:fa:82:39:06:2e:27:f3:b5:
                    7b:ca:f0:18:8c:9c:d4:f9:5e:e7:f1:2d:58:48:f1:
                    50:57:d9:e0:3c:54:99:bc:e6:b5:98:84:4d:cc:ca:
                    29:1c:bd:49:88:ac:7e:9e:41:2e:6b:0c:59:97:59:
                    84:5b:37:f0:af:d7:8f:ce:1a:e2:c2:24:62:ff:9c:
                    62:61:4b:29:df:df:98:b7:98:9b:43:47:26:9f:28:
                    fc:4f:0e:bc:6f:e1:bd:6b:f4:10:9f:59:73:89:85:
                    2c:27:f5:5e:20:cb:f9:a0:47:cb:f6:b2:d2:6d:0d:
                    c3:b0:41:4d:c2:40:e2:7c:02:9e:b7:fa:ae:06:92:
                    a7:a5:e2:56:87:57:df:ba:aa:58:44:96:55:73:7f:
                    d7:4e:d6:2d:24:16:47:2f:18:7e:29:f8:30:d6:6d:
                    19:41:a6:1e:8e:3e:b0:0e:54:3d:96:12:1c:2b:94:
                    b9:bb:8f:cd:9a:8d:69:fb:5e:1d:aa:b2:33:07:22:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:2B:B4:98:58:97:42:57:83:A0:67:18:90:37:A2:E5:E4:4F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5000:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:9f:10:bb:86:25:8d:1d:57:68:b4:63:22:07:58:27:7c:
         53:38:ba:47:ce:46:63:7e:e3:cb:5a:9e:cb:3e:91:d2:f3:99:
         9d:38:e8:cd:f3:1e:f1:5c:d9:de:f8:b8:85:95:68:8a:e1:a1:
         fe:0e:53:ce:18:5d:67:79:d4:97:53:d7:a3:a2:2f:c9:c6:8e:
         28:d0:01:5a:4f:e6:b7:51:03:fb:52:01:08:64:3c:aa:db:b1:
         c3:5c:6f:69:05:62:7c:9a:fa:9b:36:96:38:e1:2f:eb:82:1f:
         04:e0:f9:65:e8:30:65:fd:28:3e:8c:5c:78:c9:0a:d0:bd:69:
         50:d9:a0:4b:ce:3b:46:ae:9d:93:6d:a5:c9:51:c6:1a:46:45:
         0f:bd:16:96:94:37:2a:d4:55:0c:3e:2f:9e:f1:99:ff:75:d6:
         1f:a6:4f:2c:96:ba:6a:ee:ca:f0:e5:2c:93:16:c0:24:86:4b:
         42:2d:74:36:96:6c:5f:00:ae:6a:76:3f:9d:79:e6:8c:56:24:
         44:f6:ec:3f:c8:37:9c:87:80:61:51:89:d0:3c:be:6e:27:59:
         d2:04:b6:3e:f6:fc:d4:16:97:f1:f0:49:1b:fe:38:f9:bf:46:
         04:e5:86:94:94:36:2b:c5:22:42:77:28:dc:03:08:74:46:51:
         11:25:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 08:09:12 2026 by rpki-client