Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa
File:                     04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa (raw, json)
Hash identifier:          OrlGvg67QX5+t+nMIw3n5jeVa0Ro51W9OqN/F1/2vsk=
Subject key identifier:   EA:A7:82:CC:09:12:91:B5:86:66:43:7B:46:4E:16:53:0B:F3:E6:39
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584F3E47DF51C8671F78A8CA2880
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     53841
IP address blocks:        2605:8900:1000::/36 maxlen: 36
                          2605:8900:3000::/36 maxlen: 36
                          2605:8900:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:df:51:c8:67:1f:78:a8:ca:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=4384268b-aa5c-4793-936a-e9e6298070ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:54:e9:91:a4:e6:67:79:77:4b:05:6c:03:
                    f8:b7:92:97:0d:07:b7:fc:0a:ee:9e:ca:e5:ad:b0:
                    e4:87:b9:89:3d:c1:93:2e:2a:06:97:0b:34:52:a3:
                    07:02:63:c2:62:0e:79:c9:ac:9c:18:c1:a3:4e:76:
                    1c:7b:76:7a:f4:4f:48:b6:59:38:c5:9f:cd:8c:70:
                    b7:94:30:90:4a:6a:2c:d0:6f:81:f4:19:21:ee:99:
                    b5:5a:d7:97:4d:a3:e1:3c:01:38:ba:25:1d:a3:97:
                    38:29:5d:be:75:b9:f7:a0:d6:e6:a3:8e:53:6e:8a:
                    7a:d9:c8:09:43:75:b1:f3:3e:4c:13:9d:b9:f8:92:
                    7f:53:f5:6a:52:f9:1f:fc:5b:2c:6e:fc:df:d4:07:
                    24:6d:65:5d:92:26:d6:59:8d:3c:2e:36:90:4f:40:
                    42:7d:06:0d:a8:ae:ba:e9:12:38:59:16:cb:c4:bd:
                    1a:44:f8:fb:48:13:21:e1:d8:98:a9:f4:ac:d1:de:
                    79:72:86:ea:4b:3f:5f:a4:09:0d:4d:d8:ac:82:19:
                    0e:14:83:6d:74:d6:df:b4:ce:60:f4:4e:6f:69:9f:
                    b6:95:e4:ca:e7:c6:3b:06:ec:78:ac:40:69:71:30:
                    34:6c:be:c2:b8:b9:86:54:27:98:31:18:2f:11:f2:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:82:CC:09:12:91:B5:86:66:43:7B:46:4E:16:53:0B:F3:E6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:1000::/36
                  2605:8900:3000::/36
                  2605:8900:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:2d:e3:64:f5:f2:90:14:29:7c:cc:55:43:92:be:9e:76:
         51:94:25:a6:b5:5d:3d:42:da:7b:a8:31:73:cb:ec:d3:68:36:
         f4:7c:76:d1:0c:76:29:a2:af:8d:a1:e6:af:19:4b:43:cc:4a:
         7b:a4:a5:09:67:c6:e6:b9:62:5e:a4:fb:92:1e:1a:32:35:8d:
         fd:57:06:c3:45:39:f3:14:cd:7a:61:0a:82:fa:b8:98:d5:fd:
         6f:e9:1e:9e:d4:66:aa:3d:df:82:18:5c:2c:0a:b8:1f:d1:64:
         55:2b:d1:27:b1:13:d1:5d:58:ed:1b:d4:40:69:50:35:42:2f:
         0e:d9:54:e3:bd:53:01:0c:30:44:9f:84:e8:68:a6:b5:fe:4b:
         9a:71:0d:5a:a4:5d:2b:0d:ae:d0:65:c2:1c:b4:ce:97:e1:6b:
         c7:84:39:5b:17:48:da:39:cf:3e:c1:40:66:70:88:8f:08:87:
         b9:90:e1:69:38:3a:5b:7f:d6:6a:1a:e4:22:c3:3c:f4:fa:6b:
         62:3e:cf:06:39:8a:40:fc:87:a9:b6:8a:6e:87:23:44:b4:51:
         81:24:27:01:b9:58:4c:0d:70:81:92:e7:4b:bf:43:aa:39:51:
         af:0f:31:4b:13:ec:48:25:b5:03:12:d5:c7:79:29:af:12:89:
         95:62:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:32:11 2026 by rpki-client