Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
File:                     e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa (raw, json)
Hash identifier:          rgWuOVjME1/qvnameqe1/nroLMorvPPZ7sAx0DRFrU8=
Subject key identifier:   B7:5D:F9:E9:D3:39:D3:DF:9B:9A:52:51:1D:A2:76:CF:DD:C8:3A:DB
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584ECD372AFC0CAF8F9F6852C800
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     63023
IP address blocks:        2607:a140::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2a:fc:0c:af:8f:9f:68:52:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=31337e84-9b61-4695-aca5-0c3d268b54fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:e0:7d:c4:2d:35:f7:39:bf:66:18:19:87:
                    af:23:f7:14:c1:c7:aa:b4:65:b8:df:1b:5d:f6:93:
                    55:e5:fd:a7:2b:62:6c:9e:6e:97:c9:74:fe:c9:ec:
                    01:90:4a:4b:cc:fe:22:07:33:22:76:b6:b1:be:04:
                    10:4e:38:dc:4a:98:c1:70:2e:50:82:da:8b:33:3f:
                    57:50:54:7a:a8:35:02:05:4b:7f:15:b4:3b:9b:84:
                    1a:ec:04:11:81:eb:01:98:af:f0:03:12:a9:9c:72:
                    b2:72:ef:29:a3:63:d0:e2:a8:23:af:26:35:7a:8b:
                    a8:61:e3:25:80:66:18:62:a4:02:f6:ea:f8:2f:4f:
                    b3:6b:96:e0:16:99:10:c8:99:23:c6:ab:d0:8b:3f:
                    be:df:c1:77:3f:7a:16:b9:73:8b:fa:de:57:81:68:
                    8a:55:14:ab:ba:63:57:86:f6:09:09:6a:16:2c:86:
                    44:d7:f0:fe:ba:fc:df:4a:df:10:45:68:3a:6d:6d:
                    03:f4:99:d6:77:f3:d0:6f:66:12:fa:a6:92:e7:8d:
                    3b:7d:5b:d2:6d:14:18:7e:5f:eb:58:49:8f:d0:3e:
                    86:a8:b9:0c:f9:cb:47:65:6d:ac:12:14:d1:78:8e:
                    95:4e:86:4a:34:f7:71:e7:2d:52:94:3a:61:1f:77:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5D:F9:E9:D3:39:D3:DF:9B:9A:52:51:1D:A2:76:CF:DD:C8:3A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:11:97:15:92:94:54:b7:af:df:3b:2c:54:1d:ec:3b:2f:cb:
         ec:0a:c7:36:27:f7:a7:a2:0e:54:8d:a8:97:1f:8c:55:39:04:
         e4:8f:3d:23:f3:aa:a1:7d:4a:35:17:a3:3f:33:f8:b9:ad:59:
         8f:66:71:3c:fb:19:90:e0:e3:3e:43:3f:aa:16:9b:fd:37:44:
         77:3a:62:24:c9:11:51:1c:92:7a:de:b6:a5:5e:e8:77:5d:2c:
         21:a0:d0:fc:9f:d0:8d:df:0e:ab:ec:26:81:fa:01:6b:18:39:
         ab:ee:6d:27:9b:96:58:59:60:37:48:fc:23:2d:f1:3c:e6:c6:
         e0:78:25:68:c5:99:83:85:8f:ed:cc:50:d9:bb:38:37:99:6f:
         ac:2c:cc:5d:ac:be:5c:2d:74:ae:cd:af:cf:90:e6:73:84:e7:
         e0:20:66:1e:25:14:27:49:f7:65:72:73:41:49:9d:3b:ce:22:
         0a:fd:5d:63:a5:dd:9e:79:4d:67:18:47:4a:ed:80:c9:71:e7:
         c4:42:09:77:e3:1e:44:27:68:ba:49:b5:fb:fa:20:9a:e5:45:
         5e:12:e4:97:da:1d:cc:d2:a5:73:7d:03:6b:9d:4e:f4:03:3b:
         58:5a:d5:77:21:aa:cf:3c:1b:59:52:e4:7e:78:47:d9:cf:1a:
         31:dc:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 09:34:20 2026 by rpki-client