Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
File:                     70cfd91f-a721-3c04-b698-d8f19e4a2103.roa (raw, json)
Hash identifier:          K/n8ss7TrvXk9hKI8iB62DshfsIAD/Gf8NroCAQSfyk=
Subject key identifier:   18:C4:03:1C:D2:CD:A0:DA:AB:F5:6B:E2:B3:16:53:2F:F6:9A:3D:69
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584E8C8A489911F8A6CB1D433300
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     394285
IP address blocks:        2606:a100:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:48:99:11:f8:a6:cb:1d:43:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=e7c9beca-51ca-4fa3-b434-dbab9fb98691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:c4:3d:8c:ef:08:53:77:af:b1:46:e4:30:
                    e4:35:23:19:ef:b4:17:8e:0c:17:ff:59:04:ae:76:
                    63:e0:70:a3:a5:0b:d6:d4:38:a5:c3:b1:54:09:19:
                    e3:36:d2:c4:c6:65:9f:fa:72:51:7f:de:e9:ec:73:
                    2d:2c:17:b2:ef:c3:91:76:c3:09:74:9f:54:f2:26:
                    f8:ca:41:69:08:19:e2:fe:5f:91:d6:fa:42:3c:39:
                    1b:72:3f:e0:86:32:6d:d9:0e:f0:8e:b1:af:96:7c:
                    b0:dd:a6:bd:21:45:46:23:16:3e:f0:00:6f:5e:04:
                    50:ae:ea:18:0e:74:14:4c:89:39:b3:19:56:06:9d:
                    50:cb:49:35:56:f8:c3:aa:c1:20:85:be:ec:60:7e:
                    bd:ce:55:b6:a1:6e:8c:5f:13:28:1d:58:c1:3b:16:
                    7f:08:ca:07:e4:9a:8d:a1:75:03:0e:6b:84:fd:ac:
                    db:d2:e2:c0:85:82:db:bb:73:b0:b1:bd:77:43:fc:
                    58:38:14:d8:ab:e6:23:78:4a:11:54:46:2c:b5:2a:
                    22:8e:7e:01:81:31:4a:7c:c3:34:42:2e:61:06:00:
                    df:29:0d:b9:89:9a:55:19:69:a8:14:f7:3e:95:7a:
                    f6:13:fb:99:dc:7e:32:82:25:c9:51:6c:c1:f2:40:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:03:1C:D2:CD:A0:DA:AB:F5:6B:E2:B3:16:53:2F:F6:9A:3D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70cfd91f-a721-3c04-b698-d8f19e4a2103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:96:fc:2a:a3:1c:34:44:20:e9:5d:d1:e8:65:8f:c1:15:
         79:9d:0f:b4:34:be:be:e2:4d:75:8c:67:9e:26:88:b2:07:9b:
         2b:16:fc:48:10:2d:93:f2:8f:12:30:7b:b4:60:28:f7:d5:dc:
         3a:b1:a9:a4:66:eb:e8:69:6d:3c:9c:21:d5:1a:0b:6c:d4:b5:
         f4:a3:b1:13:04:3c:2b:30:71:8d:86:52:32:01:d1:b8:e5:b4:
         5d:3f:e9:10:78:22:16:27:2b:f5:70:94:d7:e4:e9:bf:18:c6:
         01:42:a9:03:e1:0d:18:7c:b8:26:93:71:5d:66:e5:33:d2:6e:
         ae:52:36:a2:f1:c3:c0:3e:76:cf:73:cc:db:8c:df:6f:c4:8b:
         b6:47:98:55:89:da:d4:ed:21:43:15:25:bc:cf:93:22:5d:69:
         55:e1:f9:37:3a:eb:6c:59:59:a2:21:92:1c:f7:36:e9:2e:7b:
         f9:e6:4f:6b:06:f2:36:3e:09:8e:60:06:20:3a:6f:91:2f:32:
         2f:45:db:8f:43:b1:ee:b7:4a:54:56:5f:47:d8:ea:2d:70:3e:
         85:1b:23:45:f2:73:56:27:66:98:b9:fc:49:c1:f8:05:02:0e:
         47:bf:f0:0c:36:dd:bc:0b:79:fa:25:3a:fd:7d:a4:db:36:60:
         82:77:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:41 2026 by rpki-client