Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72a12ce4-da99-3813-8aef-967f96780924.roa
File:                     72a12ce4-da99-3813-8aef-967f96780924.roa (raw, json)
Hash identifier:          CCC3K6Ot6KqPczGnJmWQz83mEf2tbdhlMvM957hP8AY=
Subject key identifier:   90:A2:AD:15:8C:B6:74:E2:96:49:B0:82:D0:0E:BA:54:FB:4A:7F:51
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584F8F3DED57B935DEA92014B480
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72a12ce4-da99-3813-8aef-967f96780924.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     397041
IP address blocks:        2604:f740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ed:57:b9:35:de:a9:20:14:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=d724a7f4-b0f4-459d-b879-81a59017daf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:06:2e:40:ab:dc:b0:00:f5:2f:c4:65:21:
                    bb:cf:5f:3d:72:8b:83:bf:aa:4c:ab:54:b4:e3:16:
                    9f:3e:bb:22:a6:f4:f1:1e:5f:35:70:76:f0:b5:db:
                    79:96:6d:e7:39:52:a6:fd:98:18:65:d0:7a:fe:46:
                    db:15:02:9f:86:17:d5:21:1e:c7:7e:11:62:2f:0e:
                    fe:1f:a2:55:5e:14:d7:a8:7a:01:63:03:4d:c1:6a:
                    55:8c:b5:17:39:a6:10:9e:a0:5d:e1:a0:a9:7b:42:
                    61:3f:96:2d:20:5d:d4:98:8c:1c:ef:95:3a:81:c0:
                    44:9a:5b:fc:98:27:38:d3:f3:01:df:81:2c:0c:e2:
                    27:c4:6f:a1:f2:ea:1e:45:1b:1e:26:ae:0b:12:fc:
                    3c:61:c3:02:25:7c:92:be:dd:13:e6:df:90:ea:63:
                    82:19:91:4d:87:fa:d0:3a:72:76:69:e9:5f:50:0a:
                    0e:3d:4b:66:04:03:79:b1:bc:92:81:0a:6b:ef:e9:
                    b6:79:fd:c5:2d:eb:91:4f:ef:8f:a1:ba:c2:ea:66:
                    81:41:7b:05:28:4b:fa:ce:21:29:cc:d2:e1:ac:27:
                    32:5a:8f:f4:7b:98:38:ed:c7:c2:19:e8:28:59:31:
                    7b:e4:17:1e:74:79:fb:8b:a4:51:23:86:dc:07:09:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:AD:15:8C:B6:74:E2:96:49:B0:82:D0:0E:BA:54:FB:4A:7F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72a12ce4-da99-3813-8aef-967f96780924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:83:48:47:61:20:b0:aa:92:ce:06:07:d0:34:59:f4:18:c5:
         60:ad:ef:66:60:0a:86:f1:6b:1a:41:79:dd:9a:7b:a7:4a:ba:
         bb:71:a4:22:06:59:af:4a:77:0c:76:d1:98:ff:d9:ee:33:fb:
         8d:31:16:9e:79:a1:46:5e:be:db:36:7e:a8:8b:7f:a3:cf:03:
         32:c9:38:56:3c:65:73:05:61:ca:98:03:cc:e8:7f:42:b2:6b:
         77:ab:62:c1:25:ea:7a:e2:68:04:c8:2f:6b:09:3b:f0:a8:2b:
         53:07:77:a3:be:4e:97:ee:2d:33:e8:50:a4:d6:e4:a7:2f:a1:
         54:0e:1d:b0:38:52:59:34:74:3a:78:c4:c6:e1:af:2f:2c:f6:
         13:3b:5b:54:65:5c:30:87:b6:5b:da:c1:29:b4:69:cf:7c:ac:
         82:57:a3:9d:9f:cd:48:a8:36:98:d3:6a:2e:b9:09:1a:6d:3a:
         d9:b0:aa:ea:77:db:17:d7:cc:be:64:a1:e1:9e:03:fd:4b:e6:
         8d:78:b3:06:76:30:41:f2:13:0e:e3:28:f7:88:8e:c1:d4:55:
         8b:d0:eb:2c:a7:2c:6b:9b:b7:b2:3e:4c:67:68:51:6b:46:8c:
         78:e7:41:3f:33:07:c7:bc:a7:f3:22:e2:ca:91:b8:48:84:cb:
         4f:df:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:44:14 2026 by rpki-client