Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa
File:                     74570eb9-624e-32c9-8053-b956305443bb.roa (raw, json)
Hash identifier:          MrRBq19gQEhiIaPuBxn7SP9NRoMq2dnhkNuxg9UFwkA=
Subject key identifier:   7A:17:90:96:86:E5:EE:70:B4:C1:D0:BD:AD:B1:4E:74:1E:10:DC:56
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584F119CF658F33B7E434D7A13D0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     39618
IP address blocks:        2602:fd92:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:58:f3:3b:7e:43:4d:7a:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=411b346c-b5d3-4fc8-955b-87c8a0b83170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:2f:f4:d8:ac:a8:c4:0a:ce:d1:b7:ad:5f:
                    26:11:b1:43:f5:64:3c:73:63:76:a5:35:04:2f:ba:
                    d7:30:a4:68:ba:c6:c7:02:42:f1:78:09:d4:ce:ae:
                    85:ba:48:e4:87:41:c7:13:07:a2:9c:f2:4f:0c:74:
                    b2:47:24:3c:6d:12:e5:7f:94:b1:48:ac:67:0f:68:
                    db:02:dc:65:2a:43:7d:9a:b4:20:60:07:d0:36:5f:
                    85:a9:7a:bf:61:f5:24:e0:a2:4b:0c:fd:46:d7:8c:
                    94:74:3a:b0:45:6c:1c:4f:64:af:19:29:c8:4c:cd:
                    b8:4e:79:b6:4c:86:af:a0:f7:05:b6:3d:61:df:18:
                    e9:71:53:8d:4f:b8:15:63:b2:cd:df:3d:ff:2a:c3:
                    f7:32:49:a9:d9:eb:e3:ac:9d:c4:9f:e4:2a:e1:dc:
                    47:f8:f0:1f:68:b8:3a:31:b8:43:23:4b:68:11:df:
                    6f:06:75:96:81:9c:a0:b6:3c:06:d8:63:b9:78:25:
                    77:58:c3:87:14:b4:e4:d6:e1:4c:8e:d7:40:cd:f0:
                    c5:89:17:68:15:83:27:dc:3d:73:58:66:16:59:a0:
                    aa:56:27:8b:a2:9c:0d:5c:9e:2a:9d:26:e1:bc:c0:
                    79:ee:16:14:f1:57:5f:2e:00:01:85:25:36:7f:26:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:17:90:96:86:E5:EE:70:B4:C1:D0:BD:AD:B1:4E:74:1E:10:DC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/74570eb9-624e-32c9-8053-b956305443bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5a:eb:28:b4:34:61:48:73:81:ce:70:c7:41:af:46:15:12:
         3f:ea:ca:52:3b:37:cd:56:1d:d8:0a:50:6a:82:5c:ed:1b:b1:
         dc:75:78:64:00:96:ec:e8:c1:3f:27:5f:5d:6c:58:7f:02:9e:
         bd:29:97:1f:8b:e3:36:a6:e6:69:02:bb:c6:b7:01:e9:19:98:
         c4:8d:82:be:42:71:dd:d3:74:7c:41:d9:f7:57:9e:97:d5:d8:
         6e:11:d0:01:3e:df:c2:80:09:c1:2c:68:08:a7:27:c0:01:f2:
         12:6b:37:b8:1b:1f:b4:c9:93:cf:84:51:4e:2e:44:1a:b1:02:
         e2:36:99:32:8e:b2:08:e2:2b:4a:65:60:74:42:f1:ff:da:ba:
         b2:dc:c0:99:ac:33:ea:f1:e7:db:c0:f7:56:4c:0a:bb:bd:ea:
         38:f2:98:68:25:84:d5:b6:ef:34:2e:75:13:c6:7c:ff:6f:ce:
         fa:83:10:9a:05:56:81:3b:97:81:a8:3b:b4:7c:f5:7d:86:cf:
         60:4d:e3:b6:b4:f0:d2:71:fd:bc:28:05:88:b0:f8:ca:a3:00:
         5f:53:06:31:97:3e:82:90:e3:82:47:0f:bb:62:39:a3:bb:ff:
         c5:55:8e:98:fe:43:54:6c:fd:9b:c0:4c:a2:df:f7:49:67:c7:
         5e:df:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:10:58 2026 by rpki-client