Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa
File:                     aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa (raw, json)
Hash identifier:          d7nDnXGp0/ryp5Hk6Yuur8v1CTqxPO8C86oxtYw6VEU=
Subject key identifier:   82:C2:32:58:FF:B4:3D:68:6A:78:D7:B4:A8:E5:75:1D:7F:18:1E:93
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584F6F230D39AC451B270A0E7580
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        2607:a140:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0d:39:ac:45:1b:27:0a:0e:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=7c6ce0c1-fbc2-488d-8704-e3a504f024e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:e0:5d:2d:f1:ba:d6:52:dc:be:4f:b9:e7:
                    dc:70:99:53:ec:0f:14:29:b4:7a:17:f5:d7:55:1d:
                    09:5d:99:91:9d:f1:61:b0:4d:61:d5:09:81:33:d2:
                    5c:46:01:10:18:e4:22:9f:cb:86:71:90:c5:09:d9:
                    38:d3:26:34:d6:8c:62:10:64:42:da:09:68:c4:bf:
                    64:4c:9d:e2:9b:c5:31:40:e6:0f:79:cc:cd:41:23:
                    3c:70:42:ea:38:2a:74:0c:23:01:bb:0f:da:0d:ba:
                    11:33:ef:e1:e4:85:ea:91:02:14:02:cf:dd:c3:18:
                    b6:d3:7d:8a:a0:a6:ed:58:34:0b:e8:38:0e:bb:a1:
                    d4:bc:f6:cd:b8:8c:61:74:90:89:30:4e:1f:df:79:
                    b6:6c:a4:14:dc:28:2a:3a:b1:6d:3c:88:da:d3:54:
                    d2:d5:29:df:46:6a:f2:c1:d9:0f:40:f7:d9:8e:96:
                    d0:e4:ae:38:42:b1:3b:ee:d6:3d:55:6a:7f:1e:9b:
                    e6:0a:76:28:e3:e0:ad:e3:b9:0f:84:b2:5b:b9:ff:
                    b0:84:53:9f:40:e6:26:bd:18:01:14:56:8d:0f:70:
                    d1:36:aa:20:bf:a0:86:8f:7e:ec:ce:86:93:00:fb:
                    21:85:a8:70:b0:b3:b9:d4:ab:2a:2e:d4:2b:20:7e:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C2:32:58:FF:B4:3D:68:6A:78:D7:B4:A8:E5:75:1D:7F:18:1E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/aee71fb8-29e8-34f1-8a61-7365ab1a96ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:7b:63:d8:85:63:ed:fd:8c:a0:83:d6:16:47:87:61:d2:
         4b:d1:3a:ce:d5:6d:64:30:69:2d:7f:1c:78:be:da:1d:fd:8f:
         38:3e:34:48:05:ba:82:23:b7:2a:40:58:0d:8d:04:d0:a2:29:
         03:72:da:29:a3:12:54:a3:72:4e:a2:b5:38:4e:24:2b:36:a4:
         0b:70:3c:1c:1f:52:42:5a:bb:b8:14:3b:d4:f3:eb:a1:bf:8e:
         d4:53:89:65:16:da:c0:90:c7:0e:04:ca:15:b3:f4:28:f3:4c:
         46:46:b7:d7:f1:be:77:78:9c:b7:c8:0a:b5:2d:11:6c:f0:d8:
         5b:d2:8a:a7:00:e3:4c:cc:4d:c1:86:8c:18:ce:df:37:ba:a0:
         24:2d:25:d7:e4:fc:b8:1f:1a:18:d1:5b:27:d3:54:c8:0a:6f:
         5c:39:ae:4c:dc:c8:c5:06:0d:cd:47:1e:f8:d9:ac:a2:87:18:
         3a:d4:d2:54:0f:7a:3f:7b:b8:14:95:36:64:82:4b:d2:66:db:
         20:1b:53:e0:8c:51:73:d8:d1:34:7a:34:1d:cb:24:76:b2:16:
         39:5f:ac:d6:12:57:b6:2d:fb:3e:d0:eb:15:b7:6b:75:fd:bb:
         31:ba:60:83:a0:01:80:ba:75:10:9d:b5:a1:bf:2a:5a:b2:6e:
         b8:28:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:13:07 2026 by rpki-client