Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
File:                     34f2c767-116c-381b-b77f-2c51ea9a987b.roa (raw, json)
Hash identifier:          8dR4q7Nd5Art7tF/K2YrXVNBNPKAviqEmRIvK+ZIsco=
Subject key identifier:   06:9F:0E:2C:67:AA:52:F3:01:D9:3F:37:D0:5A:22:74:F9:2C:46:BE
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F4328584F4973F4ADBC05EDBAE8283300
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14939
IP address blocks:        2604:5000:2000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f4:ad:bc:05:ed:ba:e8:28:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69659813-24c4-48c4-8c2a-9be0c89b0e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:d5:52:4b:e1:72:23:f0:e9:aa:2c:0c:ce:
                    cb:78:c5:d8:18:fe:6d:e2:c1:0e:4d:ab:ae:01:0f:
                    77:da:6b:b7:d5:5f:4a:6b:23:a2:f2:f0:74:3b:49:
                    4e:40:f9:63:66:ac:32:be:8b:0d:9e:e1:e8:44:dd:
                    ae:c1:44:8b:bb:65:9a:41:42:bd:f5:5d:58:55:0e:
                    c3:fc:2a:bc:a5:72:45:03:7b:69:32:b5:63:ee:89:
                    de:e3:6a:33:90:b9:fb:ec:7f:17:7d:f9:2f:2d:74:
                    04:a5:af:98:f3:c3:ef:ce:65:c5:d9:cc:2c:5e:64:
                    35:35:db:c2:b2:be:dc:98:48:22:96:9c:56:bc:a4:
                    74:5c:7d:68:e5:4d:43:46:79:3f:d6:79:53:f0:5b:
                    7f:a4:9f:94:0c:56:d4:2d:0a:ff:ea:db:60:53:94:
                    29:ee:88:67:31:e8:b0:80:a6:fe:9c:9e:f5:32:3d:
                    94:7e:f8:ac:eb:69:72:70:0c:16:72:4c:47:35:0a:
                    4a:07:f2:a5:4e:f2:f6:29:50:3b:fe:e5:fc:e3:f1:
                    af:af:0d:2f:94:d7:0d:0c:42:a4:c0:85:bc:84:76:
                    01:bb:25:c4:6f:fc:6b:3e:c6:e5:39:e2:98:ae:27:
                    47:79:cc:b3:85:ff:59:2b:1c:a3:59:39:f1:83:33:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:0E:2C:67:AA:52:F3:01:D9:3F:37:D0:5A:22:74:F9:2C:46:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/34f2c767-116c-381b-b77f-2c51ea9a987b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5000:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:57:f1:af:20:a6:42:96:3d:45:38:50:c7:8f:69:e9:49:55:
         73:9c:3d:a5:9f:af:75:d0:37:13:df:88:30:35:5c:14:9f:86:
         b8:dd:a8:b2:f5:5f:a6:c5:e7:82:5f:93:3c:ce:74:e5:67:e0:
         24:05:97:8a:86:e3:1c:ed:c5:1a:df:f2:1a:6c:be:a1:92:1c:
         2f:34:84:81:51:d6:39:94:6a:60:06:58:bf:e0:08:42:98:d6:
         b3:88:e9:39:1f:9a:82:5f:a8:48:89:ab:c9:a0:b6:19:2e:b2:
         f7:1f:ea:61:27:61:a6:0f:1d:bc:df:6c:bc:ae:bb:26:e6:43:
         83:33:5a:c8:46:95:ab:d0:19:41:08:9b:f7:89:3b:82:70:26:
         41:4d:8a:bc:61:8a:e2:f7:7a:f5:78:29:ca:56:e0:2e:51:84:
         1c:59:4e:1b:f6:0e:96:b8:ea:44:80:b9:f4:c4:51:98:e3:fa:
         35:8d:3a:a9:d1:aa:6d:cf:42:9b:af:e0:54:58:a9:73:d8:31:
         a7:77:1e:c6:ca:69:c1:94:72:af:eb:49:99:d3:37:e5:49:29:
         2e:e9:68:a4:6c:90:0a:f7:20:10:63:3b:d2:b0:04:ab:db:47:
         65:bb:6f:9c:b1:2c:1e:ef:7e:33:64:6c:f7:b5:61:3d:4c:ec:
         c7:f5:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:15:48 2026 by rpki-client