Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa
File:                     f4caae64-8955-3f41-a393-ad49b0d16894.roa (raw, json)
Hash identifier:          duqDrWzZXti40RBtjaYRy/1PWr234deJEBBC0jpkfMY=
Subject key identifier:   18:57:B0:E3:2C:B4:CF:B9:42:87:47:1C:B9:B7:0C:02:3D:54:9B:2E
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584F27F25945B77D248EA0004B40
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     397041
IP address blocks:        2604:f740:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:59:45:b7:7d:24:8e:a0:00:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=ebea18bb-1476-4ad4-9020-e9d16f89396a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:fc:69:9e:2c:95:e3:13:82:25:10:1b:95:
                    c3:33:2f:fe:b9:00:06:55:6a:b1:89:f4:3d:36:1e:
                    30:e5:c1:84:44:be:0a:51:55:77:d1:27:70:17:f9:
                    79:24:c4:d4:28:51:ac:90:a5:ff:be:f8:7c:3f:bb:
                    ea:89:33:4c:97:04:e6:c4:16:e3:6b:c3:21:68:76:
                    9e:66:8d:6c:d0:07:ab:ff:79:a6:1f:ac:84:c7:24:
                    d4:aa:f9:18:db:c6:bf:b2:0a:42:3b:3e:b5:59:7b:
                    c4:c4:ba:46:97:c7:9a:cc:6c:d4:c5:52:9b:79:59:
                    d8:7d:3c:d9:96:64:a7:cc:b4:dc:0d:72:55:08:89:
                    b2:68:93:78:a5:63:08:35:51:f8:ec:6f:bb:62:1b:
                    aa:d9:8a:84:30:07:74:18:f1:54:57:76:79:05:b6:
                    2a:ae:3a:a5:d6:71:68:36:a4:64:df:71:cc:a1:51:
                    f8:cc:78:d2:cc:7a:67:6f:c7:ae:6b:cf:5c:84:4d:
                    08:e0:f7:84:3e:60:b6:74:34:a9:e1:44:f4:1a:c7:
                    4c:de:2d:13:c4:05:8f:81:c2:c6:a4:b3:a3:31:83:
                    82:a5:fc:68:1b:7e:83:85:5f:b9:e1:89:64:71:aa:
                    41:27:af:8d:90:76:5f:e9:4b:fc:d8:a8:9b:86:5d:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:B0:E3:2C:B4:CF:B9:42:87:47:1C:B9:B7:0C:02:3D:54:9B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:71:fb:2e:f6:be:e7:69:e9:52:f2:0c:3b:34:a7:4f:1b:ba:
         00:78:91:05:92:25:18:a7:11:02:fd:43:4c:e5:49:df:ca:40:
         3a:d1:be:90:3b:84:8e:2d:04:3a:36:71:4d:1e:c5:50:3d:5a:
         b4:df:f1:52:e0:2d:24:34:25:1f:08:8c:55:29:bf:11:33:3b:
         31:34:74:40:e0:2c:46:41:7b:4f:2f:45:6f:55:65:83:8e:a8:
         fe:f2:bd:ea:68:d4:35:3d:76:08:0e:91:9d:43:a2:1f:04:18:
         dc:9c:75:0a:bd:ab:d9:20:07:7d:9d:e1:d4:6b:ba:d8:f6:bd:
         c2:0e:0e:f3:d7:3f:17:f2:3e:e6:40:30:60:72:a0:b8:63:d9:
         2a:35:a7:56:cd:c3:c0:5f:b0:1c:af:fb:f4:40:c2:61:c3:4f:
         87:80:da:6d:d6:a0:22:7d:e0:dd:c8:53:d0:f3:1e:c1:d0:b3:
         f6:48:db:e5:2b:84:aa:3e:17:51:76:0a:79:c1:24:00:81:6b:
         33:a8:52:d1:cb:0d:5d:84:c4:20:d6:12:a0:f5:70:8f:f5:b2:
         dc:c3:80:7c:44:e8:4b:11:a1:04:ed:51:64:1a:49:73:03:2b:
         d9:88:61:65:2c:67:1c:83:60:e3:69:74:42:74:40:90:2d:d4:
         ca:75:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:35:44 2026 by rpki-client