Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
File:                     38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa (raw, json)
Hash identifier:          wYszsuw40b/srvGP8yQuAa2yRoalojtDTRDxYOMIBeo=
Subject key identifier:   01:F0:79:1B:16:94:79:D6:3E:F3:3E:12:79:38:86:B4:B1:EC:9F:43
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584EFF777C82C3A1DAE3E30C4280
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     62563
IP address blocks:        2607:a140:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7c:82:c3:a1:da:e3:e3:0c:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=ac81a4d4-525f-40ed-935a-d7a92cfd8dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a3:29:d5:d5:07:41:2b:71:d5:50:07:45:0d:
                    cb:df:04:33:00:91:66:f3:a2:bd:ce:38:82:ef:12:
                    25:4c:3b:ab:ee:89:54:10:3d:44:19:8c:7d:bc:f9:
                    d4:ea:d4:93:43:2e:f5:2f:85:3d:11:9a:68:ff:aa:
                    e5:be:44:23:c8:a3:4b:3c:5f:3a:9b:4b:cb:63:31:
                    2a:e2:a8:dd:5e:51:86:fe:a0:ea:ef:db:cf:68:b0:
                    0a:3e:98:e2:2c:5f:83:9e:14:37:fc:97:a1:24:e1:
                    b5:8b:08:a0:da:b9:8a:a3:d7:a9:06:e8:69:2c:e6:
                    bf:88:3b:3e:95:4d:59:15:45:0f:0b:fd:ba:fb:5e:
                    37:e7:5b:4a:4c:51:70:3b:97:2d:c5:c2:87:bc:59:
                    f2:95:cc:3a:d0:c2:44:c7:71:a2:da:fc:68:13:f4:
                    6f:12:aa:83:4a:cf:fe:af:72:8b:23:6b:c2:c0:41:
                    b6:5c:f5:62:6c:b9:d8:59:83:9d:88:e3:21:aa:b0:
                    8b:98:37:04:09:e9:c7:59:c8:ea:02:21:a8:74:a6:
                    59:f5:71:6e:fd:70:57:9c:73:1c:49:7d:a6:54:82:
                    73:ab:7d:eb:b4:25:0c:7b:1f:f5:ca:f2:33:50:8c:
                    8d:2b:2e:0f:41:4d:b9:8c:74:75:fb:ef:ae:b4:aa:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F0:79:1B:16:94:79:D6:3E:F3:3E:12:79:38:86:B4:B1:EC:9F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:6c:b9:84:07:af:13:38:90:e6:e2:6e:8a:4d:40:83:4e:30:
         a9:0b:b0:9f:92:3e:51:59:47:90:b0:41:c0:66:d5:0f:2d:61:
         e3:2d:d2:c5:6b:9e:db:31:21:e3:3d:c5:05:be:e2:da:df:d1:
         48:1f:11:b7:cc:48:c7:ee:e2:66:79:96:27:47:79:28:63:5d:
         46:3e:0e:34:34:28:ec:f0:4b:04:6a:17:3c:aa:c6:5f:86:8a:
         e7:55:36:17:40:0c:e2:5b:32:33:23:31:11:f5:b1:a6:4b:88:
         43:54:86:bb:de:ba:86:e6:d6:a1:f6:e8:fe:48:2e:eb:47:de:
         17:5c:69:ed:74:8f:0b:45:9e:83:58:ce:82:b4:66:bd:49:18:
         8f:17:f3:8f:b2:72:27:20:f1:f6:d2:69:7e:f0:6b:be:ce:2e:
         da:56:cd:e5:6f:a1:ea:8f:32:a3:22:08:f2:02:db:42:4e:84:
         78:03:37:bc:c7:97:33:af:f5:e0:4a:5f:5b:a9:ff:0a:bc:3d:
         54:42:ce:e5:a1:73:f9:5c:06:c3:6b:ca:47:a2:90:2a:dd:9b:
         0c:d0:a5:42:9c:73:2a:df:8c:c0:2d:2a:6a:e9:3b:39:fe:d9:
         32:51:90:bf:11:4c:3f:20:a3:91:82:7a:49:2b:b6:f6:2b:27:
         14:6c:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:04 2026 by rpki-client