Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
File:                     35003c30-30bb-36db-9212-03de41a7d417.roa (raw, json)
Hash identifier:          lBDIsmVSV+LFuOMFkRhNYun0btBVUC56RKV18uZexEM=
Subject key identifier:   C2:BD:5B:11:11:A9:8B:2A:4D:FD:3A:8A:A8:57:E0:5D:7E:53:1B:90
Certificate issuer:       /CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Certificate serial:       010D0C9F4328584D1F4A25B5D2F9E41840EBB240
Authority key identifier: 94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     394437
IP address blocks:        2606:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:25:b5:d2:f9:e4:18:40:eb:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=95dd6176-f353-418f-9e27-efd71407c2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:30:fd:3f:0f:3f:94:88:c9:36:7f:52:81:
                    5b:39:b3:bf:13:9c:27:1f:cb:b7:8f:fb:16:c5:3c:
                    9e:49:79:03:11:d8:1b:a6:79:e8:c7:d3:71:5d:d9:
                    bb:93:a9:40:4a:92:62:70:61:8d:0d:4c:3c:e1:46:
                    82:e9:e4:c1:f2:fa:c9:d8:73:09:bc:7a:21:4c:a6:
                    99:8b:97:2f:6c:5f:0d:9a:80:ce:d3:14:e9:3a:c2:
                    a5:57:24:00:5d:89:17:1d:1e:ec:1f:76:69:42:8d:
                    5e:26:5d:89:dc:39:a9:02:52:c0:24:a6:2f:28:09:
                    e6:80:79:69:74:14:59:0b:2e:1c:c7:86:92:2f:01:
                    98:11:f7:e0:7d:d6:21:39:94:6d:ae:bd:68:72:47:
                    58:99:a5:cd:af:2d:27:da:d9:88:75:2d:51:14:19:
                    23:9e:e9:a1:54:c6:bc:17:bb:f9:ca:59:26:c1:c8:
                    30:1c:c0:22:5b:cd:c4:15:81:06:df:52:81:4b:6b:
                    2a:25:b8:40:60:a4:dd:6a:92:6a:2e:2a:90:41:9f:
                    9c:0c:70:0d:93:27:ab:d9:ab:7c:85:26:b6:bf:0e:
                    55:b3:89:3c:11:3c:60:af:82:8b:2a:9a:85:6c:a3:
                    e7:89:c6:f6:5e:08:4e:94:7b:53:ad:ee:b8:f8:65:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BD:5B:11:11:A9:8B:2A:4D:FD:3A:8A:A8:57:E0:5D:7E:53:1B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl

            X509v3 Authority Key Identifier:
                keyid:94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:7d:fb:f3:29:fd:b8:31:ae:05:92:97:70:54:6d:21:48:
         c6:68:d4:80:9c:1d:55:52:42:54:21:d2:d9:cc:4e:88:e2:f6:
         b9:ac:12:2b:dd:10:3f:09:55:83:21:9d:c9:b5:ac:e0:0a:74:
         8b:98:f0:da:ff:bd:58:8f:64:00:1c:4b:f3:ec:4c:0d:da:23:
         7a:8f:17:d2:6e:32:5d:5e:aa:8d:ca:42:7e:ef:ab:67:40:e8:
         32:b3:f5:0d:ae:f6:9c:e6:15:a5:f6:8c:06:28:53:89:0f:fa:
         15:d7:ce:e5:02:d8:ee:9b:a8:06:51:3a:4b:94:dd:4f:dc:1f:
         ac:5c:98:13:1d:0b:82:4c:b0:29:13:03:f5:7d:47:67:1d:ff:
         ac:c0:ef:4e:c5:3a:d1:d3:06:b7:13:ee:41:4a:32:f5:ad:d2:
         df:2b:72:32:f5:7b:2f:54:89:db:0f:92:f3:3f:09:5e:f6:4a:
         aa:3e:9e:82:4e:8b:ce:17:7a:4a:82:2e:14:ed:d8:fe:6f:e0:
         49:92:6e:f9:9f:11:4c:4b:3d:b4:4d:ab:de:a8:ec:ed:32:1e:
         75:c4:86:46:63:d0:04:d7:a3:8e:96:61:02:7a:a0:a8:33:f8:
         39:ed:66:a6:81:64:54:3d:09:8d:e5:68:a7:4a:39:16:37:90:
         38:18:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:49 2026 by rpki-client