Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/562fb41e-b1d0-3a57-aefd-a70a6b74ed33.roa
File:                     562fb41e-b1d0-3a57-aefd-a70a6b74ed33.roa (raw, json)
Hash identifier:          0UOzpU3noON1kgoIjejX9nepJptw+BQVXGFw3eVFtU4=
Subject key identifier:   63:A0:0B:EA:C2:3B:CB:87:91:3C:E6:17:08:64:DB:89:1A:42:12:0D
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584F6F230CBB5ADA88AA86C7A780
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/562fb41e-b1d0-3a57-aefd-a70a6b74ed33.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        2607:a140:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0c:bb:5a:da:88:aa:86:c7:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=9bba625f-fe93-4b7d-bcd6-1031712c2bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:06:39:a9:d7:cc:bb:90:13:62:c2:76:af:
                    1e:e4:5b:84:67:04:43:21:d4:80:c6:63:98:ac:a4:
                    61:17:49:ac:6f:3d:9b:6e:a0:6a:a7:f9:4d:ad:94:
                    77:c7:f4:f8:25:10:aa:63:bd:43:b9:f6:5a:21:1e:
                    ed:11:d1:4d:81:98:b1:52:69:9b:80:a1:79:55:da:
                    ce:d8:2c:bc:47:73:f9:b0:78:08:37:37:1e:8f:cb:
                    95:de:79:bf:d3:15:a1:f2:74:6c:6c:b7:0c:bb:ed:
                    a5:d2:6c:84:c1:0c:3f:ab:8d:39:1f:66:1f:a0:a8:
                    d6:02:1d:54:94:58:40:1a:92:2a:bc:62:5b:90:0f:
                    b8:b0:be:ea:20:92:cc:2b:52:43:75:eb:0a:76:1e:
                    a7:2d:78:a3:96:ea:6d:04:96:1c:7b:ad:c6:4e:07:
                    84:12:d1:11:af:20:5c:b0:eb:31:4b:ed:57:22:ea:
                    74:9f:c9:13:ad:4c:0f:5d:03:02:03:ae:fb:34:a6:
                    7f:2c:10:d2:da:2c:98:60:46:db:4a:5b:de:ae:10:
                    ee:db:6a:1c:62:b6:b3:e0:81:5d:4e:f9:5b:3f:0f:
                    d8:ed:83:52:16:12:7a:49:ee:8b:6b:45:ff:e2:f5:
                    f8:13:8b:09:3c:83:15:75:8c:78:23:f7:4a:4a:67:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A0:0B:EA:C2:3B:CB:87:91:3C:E6:17:08:64:DB:89:1A:42:12:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/562fb41e-b1d0-3a57-aefd-a70a6b74ed33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:f2:3b:79:4b:f8:6d:7d:24:1f:a9:24:5e:6f:a3:4b:e7:
         e7:6f:e1:e3:6e:91:12:23:b9:f5:c4:2c:75:a9:be:f0:3b:b5:
         90:f9:a9:94:e4:a0:fb:b1:a9:e1:7e:e5:f6:c2:b5:2f:6a:91:
         1b:c8:20:71:b8:3c:66:5a:4a:63:92:5b:ec:e2:01:9f:70:f3:
         b3:a0:e4:0b:42:c6:d8:7d:76:aa:ec:de:21:64:98:47:2d:84:
         49:af:4a:f1:f3:34:01:fb:b1:fc:69:51:9d:1d:a7:bd:71:84:
         e5:50:54:ad:ac:15:fc:cc:6a:eb:24:d4:ba:ba:14:2c:a0:d8:
         bd:07:39:96:15:0b:cf:ca:4d:97:63:e9:bf:c5:9c:f2:c3:f0:
         6c:7e:8f:05:74:85:7c:94:55:29:82:4e:c0:38:c0:b0:3a:0e:
         c1:33:95:db:d9:13:f8:33:25:52:50:ba:6d:c6:78:4c:53:04:
         96:ec:94:57:1d:dc:09:25:78:02:11:09:9a:26:a1:69:5f:4b:
         41:33:b8:3b:4c:8e:7b:ac:15:5d:46:18:2c:bb:46:bc:44:be:
         f7:0c:96:76:20:c8:a8:95:77:e7:46:a4:39:37:42:b5:3e:01:
         7b:58:e2:45:1b:eb:48:fd:3e:1f:1b:9b:da:f2:11:4d:c2:de:
         9f:0c:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:06:16 2026 by rpki-client