Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
File:                     d3660bdc-e74e-3ee0-9473-1af5c969d839.roa (raw, json)
Hash identifier:          yv6MrBasLbjCNTvlLatXdoEhwbMdom8uWbOr6h9tTaA=
Subject key identifier:   2D:AD:5C:12:2E:B3:C8:A1:D0:82:AF:98:90:E1:46:81:83:65:72:CC
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DAC457A265302507832857100
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394285
IP address blocks:        2606:a100:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7a:26:53:02:50:78:32:85:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=266a4ee7-0dd8-4a3d-af2f-a827988f62f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:de:df:af:63:d4:89:f2:6a:ac:e3:86:c1:
                    79:8e:98:41:ce:ad:5a:3d:0d:57:8d:48:75:30:81:
                    39:62:c2:bf:d5:e7:19:e9:1b:97:73:47:00:da:e7:
                    1b:22:56:8f:ca:a3:f4:8f:50:58:c6:63:8e:e5:91:
                    8a:3e:0b:74:63:16:33:3a:8f:83:3c:b2:7a:1a:ba:
                    0d:db:4f:11:02:57:05:86:44:84:95:16:74:39:6a:
                    d8:69:a2:03:17:fc:47:39:0b:c1:62:7e:1f:b0:3c:
                    b4:8b:33:a0:bf:49:26:d9:f4:5b:de:fa:f2:a4:6b:
                    63:58:b5:88:8d:ae:8a:50:3b:7c:56:af:6b:90:44:
                    6d:88:bb:98:b6:44:56:3f:38:f2:5a:f7:61:3d:18:
                    63:a7:d0:12:43:98:03:0b:29:86:0e:ad:c2:65:9d:
                    0e:2e:5b:29:2c:07:dd:eb:ed:70:78:e7:88:62:85:
                    17:5e:33:a9:20:6e:66:b1:c2:89:57:d4:47:e7:5e:
                    6f:a4:11:26:44:5f:60:2b:93:61:14:de:67:d4:f7:
                    a0:67:82:66:c3:7c:1e:8d:4b:3e:a3:d1:8a:e9:c7:
                    4b:30:f9:4d:dc:3a:9a:90:83:05:88:08:ed:74:3a:
                    19:e3:a3:2c:4e:f0:24:dc:8b:87:85:8d:b0:56:2d:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:5C:12:2E:B3:C8:A1:D0:82:AF:98:90:E1:46:81:83:65:72:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:38:1f:ba:3f:47:65:20:df:34:bb:26:84:42:24:b3:70:
         48:d4:4a:b6:b2:93:fb:66:d8:f7:43:5a:2c:af:0f:3e:aa:b7:
         f3:a8:e6:18:c6:35:55:fc:60:f2:7c:a1:28:24:8b:fe:fa:83:
         56:5d:56:2a:09:52:81:3c:8d:60:be:fb:dc:9a:f1:1b:16:a9:
         f5:ea:79:f2:f2:65:82:8f:95:b4:6d:d8:b2:48:cf:d0:c2:59:
         03:ae:dd:db:d8:e8:8d:54:1e:57:2e:91:b3:f1:b6:07:a8:5e:
         63:fa:89:45:27:9d:97:cf:05:22:85:b0:c0:80:65:3a:28:e0:
         07:80:35:d4:ab:f5:b3:14:94:52:b9:16:81:97:16:28:52:73:
         32:35:63:4e:a2:30:ba:43:99:d5:f2:d6:3c:f1:d0:c7:90:ff:
         92:c6:14:a9:b1:a4:63:5d:25:11:0e:0a:01:e1:cf:cb:3d:0c:
         e9:bb:c3:77:67:0f:c6:84:b2:81:23:c3:f5:65:1a:be:9d:4c:
         e3:66:86:ee:57:d2:f2:a1:01:ca:29:25:2e:d3:58:a5:0a:44:
         24:7c:09:91:63:fd:31:70:f6:f5:2a:cb:0c:48:d0:e8:75:33:
         67:24:d0:af:ed:2e:34:c3:4d:93:56:a4:32:fd:07:fd:e2:57:
         1c:10:42:e4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2sRXomUwJQeDKFcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MjY2YTRlZTctMGRkOC00YTNkLWFmMmYtYTgyNzk4OGY2MmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT/e369j1InyaqzjhsF5jphBzq1aPQ1XjUh1
MIE5YsK/1ecZ6RuXc0cA2ucbIlaPyqP0j1BYxmOO5ZGKPgt0YxYzOo+DPLJ6GroN
208RAlcFhkSElRZ0OWrYaaIDF/xHOQvBYn4fsDy0izOgv0km2fRb3vrypGtjWLWI
ja6KUDt8Vq9rkERtiLuYtkRWPzjyWvdhPRhjp9ASQ5gDCymGDq3CZZ0OLlspLAfd
6+1weOeIYoUXXjOpIG5mscKJV9RH515vpBEmRF9gK5NhFN5n1PegZ4Jmw3wejUs+
o9GK6cdLMPlN3DqakIMFiAjtdDoZ46MsTvAk3IuHhY2wVi2r+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC2tXBIus8ih0IKvmJDhRoGDZXLMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZDM2NjBiZGMtZTc0ZS0z
ZWUwLTk0NzMtMWFmNWM5NjlkODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahALAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHsU4H7o/R2Ug3zS7JoRCJLNwSNRKtrKT+2bY90NaLK8PPqq386jm
GMY1Vfxg8nyhKCSL/vqDVl1WKglSgTyNYL773JrxGxap9ep58vJlgo+VtG3YskjP
0MJZA67d29jojVQeVy6Rs/G2B6heY/qJRSedl88FIoWwwIBlOijgB4A11Kv1sxSU
UrkWgZcWKFJzMjVjTqIwukOZ1fLWPPHQx5D/ksYUqbGkY10lEQ4KAeHPyz0M6bvD
d2cPxoSygSPD9WUavp1M42aG7lfS8qEByiklLtNYpQpEJHwJkWP9MXD29SrLDEjQ
6HUzZyTQr+0uNMNNk1akMv0H/eJXHBBC5A==
-----END CERTIFICATE-----
Generated at Fri May 1 17:05:11 2026 by rpki-client