Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa
File:                     4c759263-7a84-306d-8d16-adacb407a81b.roa (raw, json)
Hash identifier:          Z+Vie+VbvXOGWRcdPzgIR+brVprxwBpdSiTlUCbVeL8=
Subject key identifier:   E9:54:DB:11:74:58:04:9F:C5:B6:A6:83:9F:7B:A9:8E:51:A2:A8:74
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584ECD372B47F94B7EDE34B96800
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     63023
IP address blocks:        2607:a140:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2b:47:f9:4b:7e:de:34:b9:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=33bd9fe4-1230-4acb-937f-6e86eb8529de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:c6:78:bc:77:da:27:71:09:19:68:02:0e:
                    96:37:0d:76:ce:03:17:62:2f:a3:98:93:4d:2a:1f:
                    ed:57:61:20:57:fe:01:d4:db:af:5a:2d:97:07:3a:
                    eb:21:2a:1a:99:79:2a:79:72:1f:13:ad:5b:3d:6e:
                    66:44:da:61:4f:03:f8:b2:30:74:df:a6:34:1d:66:
                    47:9b:c6:d2:14:9d:83:43:ee:44:a6:60:38:8c:ac:
                    2b:ff:8b:c0:78:79:e4:a4:cf:da:00:c0:2f:b7:e9:
                    0c:ee:b2:43:52:3f:5f:bb:e2:fa:1d:50:4b:4c:e5:
                    8e:d7:8b:ea:97:f0:b9:ee:36:35:7a:b3:97:37:8d:
                    58:71:53:a1:7c:b3:7e:ab:1c:ac:5a:b4:3c:c3:1c:
                    31:80:a5:a9:07:04:6a:eb:15:b4:b1:e7:83:8d:d5:
                    45:d7:6d:09:73:87:ef:48:ea:15:16:71:f5:3f:e0:
                    31:3c:6d:e7:0a:63:d0:49:5f:5e:da:fa:e4:a3:39:
                    95:a3:06:ea:14:27:a9:ec:c0:1a:03:8b:da:08:b6:
                    24:35:66:1e:71:32:67:c4:3d:8d:d9:1e:ed:08:5f:
                    d9:7d:d6:49:bc:c1:10:5e:65:b4:6c:b4:f1:8a:81:
                    e6:9c:72:72:4f:62:ce:5e:2c:8f:c5:71:25:2d:6a:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:DB:11:74:58:04:9F:C5:B6:A6:83:9F:7B:A9:8E:51:A2:A8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:74:9f:b3:02:ba:99:c0:f5:c8:65:b2:1b:0f:9c:6d:60:cb:
         fb:9e:19:ef:60:ca:48:d7:f7:ee:9d:53:7d:5d:51:2c:f3:8f:
         e3:24:ba:ed:a4:be:73:10:87:d0:57:18:c1:7a:07:3c:ac:65:
         0c:a3:80:a8:96:be:82:86:9c:98:7b:3b:99:02:60:57:35:bf:
         df:f3:af:a8:45:fe:e3:ea:ac:78:ed:36:eb:47:4e:4f:fe:8e:
         ce:8d:e8:fe:a9:6f:81:25:51:1f:d5:62:39:a7:0b:a2:fc:0f:
         79:97:94:26:31:2c:68:9b:83:fa:e1:53:dc:f6:89:a1:00:75:
         f4:50:da:fa:78:7e:58:86:75:bc:16:f9:d4:7b:c2:34:f6:65:
         ba:8e:b5:0e:c5:90:f3:bc:d5:48:ce:eb:a4:0e:8f:66:df:c4:
         d2:49:c8:61:d3:89:34:38:a0:96:37:08:2b:e8:48:4d:27:ec:
         e4:92:63:8d:1e:4f:21:47:14:b4:53:ee:a2:b3:cc:f9:62:3c:
         59:7e:19:07:58:e1:ad:5c:2a:1b:57:d5:4b:83:8b:42:45:e7:
         88:c4:6c:f1:7c:d0:7a:ef:2d:0a:ba:7e:39:a2:66:b8:98:a8:
         64:d3:f8:6e:b5:51:b9:4e:a8:dc:de:fe:02:f3:1e:2b:e7:b1:
         f9:2b:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:39:29 2026 by rpki-client