Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
File:                     4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa (raw, json)
Hash identifier:          cX8qqPsdIauegzNeNl9G5QSzdR8dSxCDhoVLbHWVcus=
Subject key identifier:   33:53:2D:B4:61:A8:0E:51:6D:86:56:10:02:71:7E:D8:59:6B:BE:8E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DAC4579C6E6EC36A0EDA73BA6
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394285
IP address blocks:        2606:a100:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:79:c6:e6:ec:36:a0:ed:a7:3b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=0989fc2a-f779-4cd7-938c-1a4688824b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:67:a9:db:b9:ce:46:7a:e5:6b:cf:90:1c:
                    11:1e:1e:51:88:05:37:53:f9:71:e1:f9:ba:58:b6:
                    ca:72:57:2f:5c:98:cb:04:f9:23:26:6d:d0:b4:4b:
                    7b:fb:8a:1e:d0:3a:f4:f8:7f:db:05:5f:c0:d9:1a:
                    80:28:aa:3f:9f:0d:87:c5:38:08:b3:c6:a4:78:a9:
                    81:3f:8a:49:9c:d0:4e:94:42:71:1c:47:48:95:a6:
                    36:5a:b2:a2:46:04:ed:c9:41:0d:7a:90:c4:67:f6:
                    d2:5a:21:8e:ab:3c:14:d3:06:5e:a2:0b:87:a4:aa:
                    ca:5d:41:ba:c1:ca:2e:cb:bb:95:65:4a:61:1e:84:
                    45:5b:cf:8f:07:d6:72:60:aa:fe:f1:17:be:1c:c7:
                    97:13:c1:c3:49:c7:61:23:e5:35:bc:1e:4d:d3:bc:
                    6d:70:39:1f:b1:05:2d:2f:55:30:45:2c:6b:b1:2c:
                    75:a5:e4:d0:39:25:10:52:77:cd:79:8d:fd:40:22:
                    d5:19:49:e0:4d:60:86:db:d8:92:be:dd:1a:92:d3:
                    cb:37:7e:37:43:09:1b:d7:d9:74:75:b5:22:ce:09:
                    b2:f0:6d:9d:ed:9b:bc:2f:81:3f:aa:a3:57:67:39:
                    51:4a:53:29:fa:92:88:a3:f7:3f:00:79:9f:57:b0:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:2D:B4:61:A8:0E:51:6D:86:56:10:02:71:7E:D8:59:6B:BE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:73:ae:e3:1c:7b:6c:05:e8:00:f8:8d:bc:26:0d:88:ca:
         b4:68:6b:96:68:c5:0c:57:f7:ac:62:a5:2d:ec:1f:82:1f:4f:
         2b:79:ba:a1:2d:b3:0d:0d:9d:85:53:85:7e:ca:cf:9f:af:2d:
         02:96:18:6d:3e:eb:4e:d0:dc:a8:d4:d7:2d:1f:28:14:c5:1a:
         37:fa:47:33:53:49:c5:ca:f7:91:97:10:b1:82:eb:95:f1:80:
         5f:41:51:86:2c:31:51:6c:64:66:60:7b:f8:c1:19:23:04:e1:
         ff:5a:14:d3:9f:ed:02:ae:46:ad:61:d0:58:fe:56:bb:51:fb:
         ec:fb:9d:e4:94:1e:5b:12:23:e9:85:35:86:42:b6:de:1b:67:
         3e:0f:e6:f6:f0:a2:07:5f:12:25:00:6e:ea:ad:20:3e:c0:c9:
         89:96:f7:23:78:36:69:46:f1:a1:40:b0:8c:99:8a:bb:15:9c:
         40:bf:20:57:ac:ba:58:ac:a3:a9:84:33:0a:67:cf:88:a7:26:
         7b:53:c9:e6:69:1b:1c:57:dd:cd:58:8c:7d:ad:66:18:c6:9a:
         59:06:41:e9:6f:de:59:ac:a4:bb:d9:fd:29:ab:17:29:8d:98:
         28:23:ff:7e:f1:fa:c8:6f:88:0d:4b:3f:31:a3:a8:2a:71:0c:
         23:a5:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:05:11 2026 by rpki-client