Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
File:                     70af50cc-33f5-3282-8776-d1c54551e539.roa (raw, json)
Hash identifier:          Irtjqbs9mra/i6f9lHYk4td7d2ttZ0CJPLVDRwUC/gk=
Subject key identifier:   0C:05:4D:DE:84:67:97:B7:F8:63:08:9E:BA:D7:F1:D4:A6:89:2F:B9
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DAC457A57ADEFE2AC9B2BF200
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394285
IP address blocks:        2606:a100:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7a:57:ad:ef:e2:ac:9b:2b:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=10449774-6713-4239-aff3-bd232a91d1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:6b:29:b8:04:ea:cb:23:be:11:17:f6:55:
                    39:bc:9e:98:f7:4b:61:c5:ea:5e:cc:8f:94:c2:46:
                    fd:bc:06:d9:27:af:81:59:01:8e:ef:6c:fb:fa:f7:
                    b6:11:cc:70:74:42:b3:eb:80:6e:47:f0:f8:6e:5d:
                    26:2a:42:5d:62:65:c3:d4:e8:2b:5d:b7:69:5b:a6:
                    b8:ee:07:6f:5d:c6:d9:b3:b9:02:6f:fa:58:b8:1f:
                    1b:dc:3b:a8:93:75:75:08:e1:cf:89:fb:9f:6a:0e:
                    d5:68:c6:d4:0b:0a:9d:1c:8d:61:77:08:8c:a7:00:
                    76:10:51:c3:00:eb:e6:04:39:87:5a:88:97:bf:ab:
                    2d:77:5e:ce:ba:76:99:7a:82:03:cf:5b:a6:d0:15:
                    68:d5:07:6c:c4:08:09:2f:25:74:e0:43:64:94:10:
                    78:95:68:86:5c:ed:ac:71:59:80:9d:0d:47:3e:91:
                    aa:13:86:5e:da:17:79:56:3a:7f:34:31:dc:9a:48:
                    ec:94:15:7e:26:a6:73:fe:3a:96:36:65:c7:56:f1:
                    91:03:c5:a7:ac:c5:fd:10:f3:09:3b:f6:6a:28:9a:
                    0d:99:a0:b8:ef:28:6c:51:b9:4a:5f:6f:4b:c6:1e:
                    ee:0f:ed:f8:99:6c:02:1e:6a:85:38:ad:c3:39:1d:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:4D:DE:84:67:97:B7:F8:63:08:9E:BA:D7:F1:D4:A6:89:2F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:a7:f7:a5:30:40:5b:36:3f:b1:34:7a:5d:f7:53:20:df:
         6d:38:47:ac:2b:37:22:4d:46:b9:62:5d:81:75:7b:59:e6:6b:
         1c:a2:db:b4:50:31:be:4e:55:b0:10:b9:e0:8e:b5:05:5d:78:
         d7:d1:3c:fd:be:96:bd:fc:3a:ff:d2:30:e2:f1:f7:f5:55:46:
         23:b0:d5:21:b4:f4:b4:a2:c1:17:42:7d:45:70:4a:3a:2c:f4:
         55:27:2e:b3:f1:5e:68:8e:2b:4e:de:f0:08:ef:a4:8f:ee:5a:
         f2:84:cb:f4:5e:d7:d9:c5:6e:8c:2f:bb:12:bb:25:2e:f1:0d:
         26:3d:3f:b4:a6:7a:be:f9:0e:80:d7:94:77:48:76:27:91:3b:
         00:1c:99:c5:35:c8:88:05:72:e7:70:6c:01:39:20:b9:76:6e:
         2a:b4:41:2d:40:92:d9:cb:6b:57:e5:59:a5:ea:06:68:0d:bc:
         7d:99:b7:30:4d:02:05:01:c3:d6:84:31:1d:e6:e3:cb:2a:21:
         ff:00:1f:12:33:31:46:d0:b4:c5:14:0f:57:9c:cf:ca:1a:91:
         1b:3a:0e:89:cf:14:39:7f:0e:3a:ef:5a:75:02:03:8a:8c:b4:
         96:bb:cc:3f:a8:f6:77:a1:82:92:30:5e:ae:e6:06:6f:7b:00:
         1a:94:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:06:27 2026 by rpki-client