Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
File:                     9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa (raw, json)
Hash identifier:          sw99sGYEiChRWZvz8IN1si4TmwfClNPDcCfJwsH2qBY=
Subject key identifier:   B6:AC:3C:58:52:F8:79:79:37:45:C0:B6:79:51:6C:04:A7:50:92:AD
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DAC457A112BC5A7412DB317A8
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394285
IP address blocks:        2606:a100:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7a:11:2b:c5:a7:41:2d:b3:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=6742fc96-370a-4f30-b1e3-dea26c87e6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:84:64:71:a1:34:70:a6:5e:40:5a:51:6f:
                    36:f2:fa:b7:4a:2e:0a:1d:ab:3e:e0:0d:78:c8:6f:
                    25:8b:25:f0:fc:46:cf:ba:ba:fb:da:71:41:bc:89:
                    d1:1d:17:63:75:93:e1:a2:90:2f:5c:47:9f:b1:67:
                    1e:99:85:db:13:07:20:2a:e0:b7:48:e1:79:af:21:
                    b5:c1:de:cb:d4:fa:a3:18:50:c5:77:af:cb:84:c1:
                    fc:bd:e7:e9:73:54:38:74:62:8c:58:4b:2d:d6:3c:
                    0a:d7:c8:2e:e2:fb:8d:bc:dd:cb:aa:f4:17:8e:42:
                    da:7f:80:5c:82:e7:37:cc:75:a0:a2:a3:51:a7:2c:
                    3b:ce:45:6f:2b:b1:d5:3c:ab:0c:b5:40:ff:53:db:
                    c1:07:e0:59:12:1c:80:ff:69:fe:16:5f:54:da:dd:
                    db:83:4d:5d:a4:d6:d4:1d:c1:8b:d0:8e:36:49:c7:
                    87:37:97:59:53:b0:9d:2a:94:c6:ad:dc:40:d3:db:
                    82:40:19:00:fe:7d:80:ec:4f:7a:03:9c:de:cd:ab:
                    0d:47:97:a1:05:4c:fe:8d:bf:61:bb:dc:21:a0:0d:
                    36:b4:4c:ec:13:41:bb:de:ee:be:36:f6:07:f3:0f:
                    7a:5b:4e:f7:5a:3b:ec:ea:d1:0b:14:28:de:1c:41:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:3C:58:52:F8:79:79:37:45:C0:B6:79:51:6C:04:A7:50:92:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/9b4cffba-e77d-3f5e-9c26-65875bc00cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:37:71:3b:ea:48:47:96:0e:b5:ee:8e:25:d1:cc:64:c6:63:
         31:da:64:30:b9:ad:ad:25:da:14:8a:aa:a9:aa:ba:6f:d7:71:
         47:6a:74:dd:0c:64:11:2a:a0:33:b9:1b:47:9d:4e:a0:87:19:
         55:e1:e3:21:07:28:5c:2b:5c:e8:73:35:ed:13:84:62:05:f1:
         fc:d0:db:b2:b8:cc:81:88:fd:d7:d9:e9:6d:0c:03:ec:4f:e0:
         23:dd:ed:e9:45:bc:30:be:0c:63:2f:d8:43:fa:57:fd:30:af:
         e4:99:b3:a4:de:1d:2f:e5:61:f6:02:6a:f9:60:35:92:07:bf:
         e3:2b:43:f4:4e:44:f0:c8:79:04:b6:80:29:2e:0e:22:d4:b8:
         8e:2c:e0:71:4d:fb:b5:7a:ea:f2:9a:98:38:46:ff:b0:fa:d6:
         49:1c:33:1c:9d:6c:d2:a6:52:51:a8:dc:19:5d:4d:ff:ca:3c:
         09:05:3b:9b:bc:ba:b0:de:f5:d5:77:ae:e1:d8:ee:9d:1d:f0:
         d4:22:57:2b:f1:20:7c:4b:0d:39:5a:8f:d4:72:25:e3:ec:32:
         3b:a3:67:03:d5:85:51:20:b5:9f:e1:12:f6:56:d1:a7:7d:83:
         8c:09:e1:ae:5e:da:7b:c8:c1:13:85:21:d8:16:43:bc:c1:9b:
         c5:74:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:01:57 2026 by rpki-client