Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          Iq1mLBNioJUPD7hcYY5ylMIGeutEk5/ecGiNEi2iJYo=
Subject key identifier:   B4:B7:C0:CB:12:EE:53:94:D2:19:FA:C5:B2:86:3C:8D:74:11:53:6E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584E8C8A4935C05A31BF17C572C0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:49:35:c0:5a:31:bf:17:c5:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=10178413-94cf-454e-a0f1-fcd1b30b196f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:a9:cf:95:e3:6c:fe:40:ad:c5:50:43:fa:
                    d6:1a:9a:75:56:ad:0c:b2:af:a7:90:f2:ba:bd:15:
                    32:fe:5e:0d:72:3e:38:55:75:8a:c1:8f:42:01:73:
                    4a:70:90:7b:5e:bd:da:b8:e3:2e:d0:a5:c6:53:8a:
                    d7:97:00:28:01:68:8f:6c:8f:28:b7:92:95:1e:e9:
                    4a:3b:c2:97:da:9b:60:17:5b:eb:4a:ec:44:e8:73:
                    38:87:ad:cf:c4:ce:e6:ba:c9:58:f6:90:89:a2:87:
                    4d:6d:0a:4d:a9:c8:f0:d5:18:c7:3a:23:cf:0d:fb:
                    24:07:44:5d:c0:a2:d1:ff:59:40:4b:9c:32:43:00:
                    04:5c:a5:da:fc:e8:0c:fe:2f:3a:59:4f:1c:6c:5e:
                    f1:d1:92:04:a0:88:c8:d2:a8:77:24:22:34:87:1c:
                    f2:5d:55:e1:9e:ae:09:ea:05:ba:5e:bb:62:ef:81:
                    9d:80:f8:2e:57:48:82:35:a8:c9:49:43:f7:a5:2b:
                    ad:98:7b:0b:99:22:33:74:5c:9c:84:f8:9a:be:9b:
                    87:38:e1:ff:14:dd:17:e0:5d:f7:a9:27:49:a8:88:
                    17:7f:31:88:6a:f7:f8:20:a5:bc:d3:6c:90:fe:67:
                    6d:4c:32:c6:6f:db:18:55:3c:d2:21:ff:3e:67:c5:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:C0:CB:12:EE:53:94:D2:19:FA:C5:B2:86:3C:8D:74:11:53:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:8d:24:95:b8:cf:9a:3f:a0:d3:de:7e:f4:52:6f:45:3c:
         d5:d3:46:2b:30:0a:61:d0:ab:97:eb:9b:a5:26:8e:9c:78:78:
         49:76:31:48:15:0c:fd:54:95:4c:5d:b6:3d:3b:41:ae:c7:9e:
         ab:1e:38:c6:df:50:45:fb:73:30:37:be:73:4c:d3:e1:32:e9:
         74:77:44:2e:cf:49:83:61:88:8d:9a:08:f4:d9:c6:ad:ba:48:
         02:a2:e1:84:f2:fe:77:74:41:cb:06:ed:88:dd:a4:9f:77:fe:
         c8:2e:88:30:c2:31:4d:45:71:9a:74:1c:4d:3c:5a:95:cf:61:
         f3:9f:82:1c:e4:f1:43:7f:e4:ff:af:9a:2f:13:02:7b:39:31:
         e3:f5:f0:6b:fc:9a:e8:e9:54:c6:a4:98:0a:1d:5a:91:b5:f3:
         fd:4c:42:d7:65:0e:7e:7d:ee:c6:b8:e7:f5:0c:8f:cd:cf:0d:
         eb:bc:99:50:cc:18:86:8e:4a:aa:e1:bc:4c:e5:de:26:3f:9f:
         68:43:99:36:07:82:61:bd:71:83:05:1a:a9:8c:51:29:66:37:
         a2:7a:47:b0:3b:2e:a6:39:c6:98:4b:4c:58:55:33:23:90:de:
         92:12:29:61:73:77:b6:7e:47:3a:3f:59:4d:84:19:6a:9a:ea:
         d9:c1:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:33:35 2026 by rpki-client