Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/34325ac2-c798-3a55-b921-1e0ce4ce9c55.roa
File:                     34325ac2-c798-3a55-b921-1e0ce4ce9c55.roa (raw, json)
Hash identifier:          H0IBV7zMz0Qx975INLhEV6RtYVTOjJi7Im/OYF/KtXI=
Subject key identifier:   02:7D:BD:7A:29:F7:95:D7:63:39:61:AF:9B:B9:7F:7E:54:72:3A:8F
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584E2AD46035A44B5AD7AAF3B880
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/34325ac2-c798-3a55-b921-1e0ce4ce9c55.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        2607:a140:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:60:35:a4:4b:5a:d7:aa:f3:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=90bae06f-df45-42aa-8081-58f43e83b11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:91:93:3f:90:ae:53:21:56:f8:45:09:67:
                    5e:ac:63:31:a1:ab:5f:ec:31:4f:99:0a:ce:c1:a8:
                    db:db:81:59:10:06:4d:47:f5:29:7c:da:9b:54:d4:
                    5f:60:d8:0c:ac:a7:62:6d:5f:73:9f:81:d0:5f:2b:
                    bd:65:24:25:e2:6c:10:bf:e6:23:75:70:d2:63:5a:
                    b3:a4:18:c9:69:00:b0:8d:7c:37:8b:68:10:c8:72:
                    89:a4:79:4e:4c:25:2b:53:69:bb:24:06:85:6a:35:
                    28:f9:c4:ac:5a:5f:4f:da:5c:00:6e:0f:de:24:98:
                    c5:a2:21:9e:ee:0d:f3:da:a6:ba:71:21:cd:39:25:
                    f1:56:02:1c:9b:03:06:a1:c5:02:57:78:bc:1a:a0:
                    0d:e4:fb:5e:1a:80:49:fe:3b:4c:c7:a2:0d:0a:e0:
                    40:8c:73:81:e1:86:41:47:28:3a:9a:9f:18:9f:eb:
                    7f:66:8f:df:2a:de:74:1b:74:02:ce:8c:8f:7a:be:
                    7a:61:bf:20:df:19:c0:fb:99:46:71:4b:23:03:cf:
                    1c:84:9c:c7:fa:28:ee:05:14:a0:7b:8b:82:ec:d7:
                    8f:db:58:e7:cb:64:36:d0:df:cf:e9:f1:21:40:9e:
                    c7:66:6b:8a:d5:1a:9b:16:2d:eb:07:df:99:59:2c:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:BD:7A:29:F7:95:D7:63:39:61:AF:9B:B9:7F:7E:54:72:3A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/34325ac2-c798-3a55-b921-1e0ce4ce9c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:57:61:bd:58:14:8e:9f:7b:db:c4:9f:a9:3e:48:98:7e:7a:
         fd:e9:8d:5f:71:7d:5f:9f:5f:02:0d:52:ce:09:8b:02:9e:cd:
         99:44:a2:d2:09:f5:58:1e:49:8f:52:dc:ce:39:f1:5d:df:4f:
         37:b4:34:3d:2a:fa:3f:00:ab:2a:17:db:24:d3:b4:19:b6:8c:
         90:72:a6:02:5b:9e:79:9e:54:e8:10:01:5c:fa:5c:9e:a7:6e:
         bc:46:c7:71:3d:65:bb:6a:46:f5:f6:88:c1:5e:d0:7d:50:bd:
         e6:20:82:81:1c:08:68:9b:4b:32:45:a6:12:0b:da:f3:ac:a5:
         e1:0a:7c:43:97:7f:ba:e6:34:70:30:f0:99:6f:02:72:5b:91:
         30:47:25:9d:a4:15:28:35:3a:59:3b:e0:9e:01:f8:0b:c7:a4:
         77:62:b7:21:ab:98:d6:28:6e:08:3b:a0:d4:86:23:6e:c3:a2:
         13:67:49:bd:da:af:3c:b4:1d:3f:58:e5:65:8b:a2:c8:70:8f:
         c9:13:40:bf:1e:37:d4:e2:a3:e8:9e:f2:67:0f:13:fe:3f:78:
         e4:2e:77:d3:ec:60:a7:81:ff:29:68:e2:98:34:1f:e0:72:6e:
         63:cb:17:1d:e2:ff:07:8e:77:09:3b:3a:f1:29:68:bb:4e:b4:
         64:8f:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:23:28 2026 by rpki-client