Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
File:                     3e1febce-a882-390d-b48a-932011598477.roa (raw, json)
Hash identifier:          xszfvNJ6hkBX7tyEvdFLykImeqbwOa8sNvKt1+OLFjg=
Subject key identifier:   69:4D:33:BC:90:9F:A5:46:F9:BE:D6:7C:63:93:38:0F:A6:2C:4A:C3
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F4328584F5A3303CDFE448004E5B0A5B1
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     394710
IP address blocks:        2604:7a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:03:cd:fe:44:80:04:e5:b0:a5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=dc8a8cd6-671c-4256-a3b6-9cf726be5bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:5f:25:65:5a:5c:2c:51:23:21:9e:e5:f1:
                    70:c4:88:1b:3c:f6:21:7e:64:6f:22:00:a8:80:9a:
                    b7:ae:0c:36:af:ec:1e:95:18:87:42:7d:4d:02:89:
                    3f:94:c8:8d:1e:bc:9d:2d:9a:56:15:73:4c:e9:d2:
                    b3:af:2a:6d:6b:f9:59:bd:34:72:bd:45:ea:af:9b:
                    48:4f:d3:58:a6:27:27:70:eb:1e:3b:e1:e0:39:60:
                    2a:50:53:31:07:41:7b:0b:ce:04:b4:5a:32:a8:20:
                    f2:c4:a3:4c:d7:08:7d:2a:66:d0:67:0b:44:b8:d1:
                    53:f7:af:ea:4a:67:6a:7a:bc:ac:49:39:f3:76:1e:
                    4a:c1:2f:dd:8c:f5:18:7d:2d:41:e3:e6:81:e2:ee:
                    74:1a:a1:bb:85:3e:af:f9:31:66:9e:8e:e7:38:34:
                    72:2b:26:a4:05:fe:6c:ac:4e:cd:ce:02:f3:3f:2e:
                    2b:a2:7d:51:d5:c1:0f:db:d1:9e:56:86:53:b3:17:
                    cd:21:19:88:b4:7d:8b:35:56:b6:f5:1d:06:cd:90:
                    fc:b4:59:9a:99:82:c5:2d:72:56:7c:e7:e2:2b:02:
                    cc:fd:df:33:d0:6b:9a:83:a9:ea:ee:ce:d8:b2:ee:
                    4f:dc:09:3d:7e:39:e7:7d:f4:57:63:97:e5:88:5c:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4D:33:BC:90:9F:A5:46:F9:BE:D6:7C:63:93:38:0F:A6:2C:4A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:00:9e:2e:59:a6:65:97:9c:39:07:db:f9:38:b4:c9:c1:
         95:20:3e:28:d6:47:bc:85:7a:ab:84:f4:ac:85:42:d2:3b:50:
         0f:d6:48:05:4f:c2:6c:24:77:9e:61:51:87:44:0a:48:e0:a0:
         a6:a1:51:79:70:dc:02:89:98:c6:36:ef:05:67:1a:3c:66:da:
         86:42:21:0c:d4:58:49:4a:82:2d:b0:1c:ad:0b:44:a6:8c:ee:
         bf:86:28:b1:e7:a1:cd:03:e3:a9:ba:01:92:02:5e:a2:eb:f5:
         bb:ae:9f:90:79:c7:df:ae:e5:43:e2:57:1d:b8:b2:74:cf:58:
         96:35:d9:e8:a5:dc:aa:57:37:9c:c4:b2:fe:2a:c3:7a:b6:1d:
         1b:47:a3:b8:2a:d4:c8:a9:8c:6d:56:7e:5b:b6:4a:cb:ff:49:
         66:ae:c1:21:f5:e7:54:b0:3b:e7:96:4b:db:a9:be:c5:fc:ef:
         90:bd:d0:df:45:27:31:eb:bf:a6:b9:37:8b:98:5b:e9:2e:69:
         b5:77:3f:df:86:c9:4a:6b:16:76:42:90:ba:e5:72:ab:f4:1b:
         ad:02:de:ee:f2:e4:ba:e3:44:f1:f7:0a:65:1e:2f:01:ee:7f:
         13:e2:ee:b1:f8:14:50:41:fe:24:db:f1:28:c8:37:69:2b:a1:
         15:ae:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:28:11 2026 by rpki-client