Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
File:                     70af50cc-33f5-3282-8776-d1c54551e539.roa (raw, json)
Hash identifier:          bW+LcMsmqDOto1+JAOeGFdzpi1aXZ8AL93E9Xz7/Q5A=
Subject key identifier:   EC:84:69:DF:C6:AC:8B:FF:B8:ED:DE:00:BB:74:EE:3F:02:48:56:9D
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584E8C8A4928BC031E989B462300
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     394285
IP address blocks:        2606:a100:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:49:28:bc:03:1e:98:9b:46:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=2861a6fb-cf3e-45e3-89ec-26289f6c81a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:94:06:96:c1:0c:aa:0c:2a:c0:05:3f:72:
                    3d:52:35:be:ce:d7:46:3d:e5:3f:d0:22:58:9e:4d:
                    e1:f0:2a:9d:d2:8e:43:a2:5a:78:b3:09:95:21:cc:
                    5e:f2:b8:79:f4:04:14:c8:a2:60:a9:44:e3:ae:6a:
                    a6:1a:1b:e9:84:dd:81:8b:70:00:0b:ee:60:80:58:
                    c7:ca:28:55:86:30:90:d5:e2:07:a2:7f:54:bf:e3:
                    6d:76:5a:43:64:97:ea:d1:6f:96:c0:f7:e4:4c:49:
                    f1:ca:e8:47:55:f2:d9:1e:a4:09:0a:ec:ac:25:3f:
                    b6:01:ce:b3:80:88:99:42:59:df:3e:84:ff:f9:3f:
                    f9:88:91:57:cf:d2:79:38:3e:c1:9e:0f:58:fb:5f:
                    81:01:a7:94:ff:31:2d:9d:4f:a1:f1:31:ea:ab:35:
                    35:b6:98:d4:bf:b0:c2:fe:ed:bb:5b:98:32:98:a0:
                    a7:4c:89:d7:ed:6e:e5:aa:cc:70:4e:82:1b:95:ae:
                    15:e6:32:ab:22:41:fa:65:d5:f5:d1:78:c4:aa:08:
                    8f:88:16:59:ff:ed:bf:5a:2f:02:79:5f:0c:ae:31:
                    d1:f6:8e:ac:d9:77:d4:92:df:1a:35:a7:46:89:81:
                    bb:ab:55:94:a1:be:fa:da:79:1e:3b:3a:9e:cd:47:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:69:DF:C6:AC:8B:FF:B8:ED:DE:00:BB:74:EE:3F:02:48:56:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:29:5f:b9:bb:9e:fb:02:5c:88:24:c8:40:b4:50:c1:f4:
         84:3e:34:c2:d1:2a:08:00:ec:45:57:04:3e:05:ec:c8:fc:f1:
         46:4e:6b:d3:69:19:76:58:16:d9:ae:b4:92:71:35:a3:d7:06:
         40:00:4d:b6:47:3a:cd:12:fb:8c:4d:c5:ae:a2:83:18:63:e8:
         d2:64:0d:d9:98:6c:d3:c2:d7:3d:44:df:fe:89:c7:42:62:6e:
         1e:fc:42:a1:aa:02:9a:4b:f7:4b:dd:dd:88:ef:11:8a:40:30:
         02:81:11:bc:5b:fc:ed:5c:9f:37:9e:3a:aa:bf:e1:b5:24:4a:
         f6:fd:b1:3f:3d:6d:6f:01:a3:cc:cd:2d:9e:12:66:f6:a0:83:
         7e:fa:4b:46:56:ed:6b:b2:a9:d2:1f:92:05:cc:67:d8:47:b2:
         f4:fa:0d:52:63:6c:5a:13:e8:15:06:bd:f1:95:ac:d9:a3:21:
         1a:32:d5:aa:6a:a0:08:45:18:39:4f:6a:b0:dd:a0:69:fd:40:
         42:f6:4f:a2:de:b7:74:9f:14:7b:33:46:67:3e:40:14:4d:7e:
         fd:07:cc:4d:97:35:b2:d6:60:4b:48:0a:a5:96:87:ad:08:92:
         f3:6f:ee:db:f7:64:d0:7b:25:36:c2:e2:9a:f4:d7:99:fb:aa:
         81:52:d0:e5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6MikkovAMemJtGIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
Mjg2MWE2ZmItY2YzZS00NWUzLTg5ZWMtMjYyODlmNmM4MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHKUBpbBDKoMKsAFP3I9UjW+ztdGPeU/0CJY
nk3h8Cqd0o5Dolp4swmVIcxe8rh59AQUyKJgqUTjrmqmGhvphN2Bi3AAC+5ggFjH
yihVhjCQ1eIHon9Uv+NtdlpDZJfq0W+WwPfkTEnxyuhHVfLZHqQJCuysJT+2Ac6z
gIiZQlnfPoT/+T/5iJFXz9J5OD7Bng9Y+1+BAaeU/zEtnU+h8THqqzU1tpjUv7DC
/u27W5gymKCnTInX7W7lqsxwToIbla4V5jKrIkH6ZdX10XjEqgiPiBZZ/+2/Wi8C
eV8MrjHR9o6s2XfUkt8aNadGiYG7q1WUob762nkeOzqezUfHMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOyEad/GrIv/uO3eALt07j8CSFadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNzBhZjUwY2MtMzNmNS0z
MjgyLTg3NzYtZDFjNTQ1NTFlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAOAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAibgpX7m7nvsCXIgkyEC0UMH0hD40wtEqCADsRVcEPgXsyPzxRk5r
02kZdlgW2a60knE1o9cGQABNtkc6zRL7jE3FrqKDGGPo0mQN2Zhs08LXPUTf/onH
QmJuHvxCoaoCmkv3S93diO8RikAwAoERvFv87VyfN546qr/htSRK9v2xPz1tbwGj
zM0tnhJm9qCDfvpLRlbta7Kp0h+SBcxn2Eey9PoNUmNsWhPoFQa98ZWs2aMhGjLV
qmqgCEUYOU9qsN2gaf1AQvZPot63dJ8UezNGZz5AFE1+/QfMTZc1stZgS0gKpZaH
rQiS82/u2/dk0HslNsLimvTXmfuqgVLQ5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:53 2026 by rpki-client