Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa
File:                     01243c49-b15c-3c10-9b0b-65476f595fe6.roa (raw, json)
Hash identifier:          XR+uacGwMqyHbQiXHn2Pr6oAqOCvHkj77fPR7HuPD+A=
Subject key identifier:   2B:F1:58:6A:19:89:CD:9F:08:12:19:63:7D:C8:08:06:A4:D6:B6:D0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372392B53450C3E9D26AA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20231
IP address blocks:        2602:107:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:39:2b:53:45:0c:3e:9d:26:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=804a2029-df2b-4d97-b956-362dc966a377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:61:cd:bf:39:12:d7:cb:90:06:22:45:be:
                    f3:99:e1:d7:85:59:1c:19:cf:e6:ca:49:4e:13:09:
                    b6:89:7f:c6:06:51:66:12:14:1f:f3:93:59:4b:ec:
                    20:39:0b:0e:c0:5f:ea:86:cd:eb:5b:c2:d4:a4:f0:
                    42:09:de:16:34:fe:1c:f8:4f:e2:31:a6:42:35:f8:
                    45:df:a7:a6:94:2d:14:6c:37:a1:04:83:ff:24:95:
                    28:40:a7:cd:84:96:c0:b5:31:d0:51:79:dd:30:70:
                    6a:55:28:53:63:c0:69:f9:f4:ff:85:5c:43:d5:30:
                    76:f0:a9:46:e2:4b:8a:7b:53:46:f0:89:da:cd:70:
                    3b:51:91:00:a0:14:8d:37:fe:12:ad:d3:bd:5e:09:
                    65:ef:2e:11:3f:2b:60:16:17:f7:dd:19:dc:1d:b9:
                    f5:24:74:58:d8:13:c7:b4:d5:ef:e5:23:a1:70:2c:
                    17:60:a3:80:2d:84:de:86:16:b9:ef:7e:d3:5b:2b:
                    dd:52:d5:a5:41:10:03:1f:71:0c:b3:b1:6a:bb:33:
                    b0:aa:04:b3:d9:19:26:93:6e:27:a7:7e:98:10:db:
                    7c:d4:38:f8:f4:54:46:ce:92:9f:f7:d5:00:b2:ef:
                    cb:51:3f:5f:b4:1e:33:28:da:68:54:9c:4c:fa:5b:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:58:6A:19:89:CD:9F:08:12:19:63:7D:C8:08:06:A4:D6:B6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:23:13:5a:54:14:0e:a7:d7:1a:4a:3c:8d:10:2e:ea:52:
         c7:3a:e0:7b:76:ed:6f:9e:82:a8:7a:cc:5e:41:bb:09:0d:c7:
         ff:f0:22:bb:22:0f:be:4b:43:60:8a:71:9f:d0:10:4d:35:b8:
         28:31:a7:f1:8f:5b:38:ab:28:0b:e7:32:57:22:1d:25:47:76:
         e5:cd:19:eb:40:46:e2:a6:fc:4e:ad:b8:a7:f4:a1:3d:50:76:
         82:b9:f0:47:a3:df:50:7c:ff:e1:dc:c9:92:f9:e8:aa:49:bb:
         f1:78:0e:9b:ff:dd:87:fc:ee:12:0c:20:44:8a:4c:a2:99:cd:
         14:70:f2:b3:04:a4:1e:f8:ab:7a:4f:01:e7:98:76:77:56:f4:
         df:a5:35:2c:98:47:9b:49:87:2f:3f:27:89:66:43:5b:2b:d1:
         e8:c8:ef:14:35:54:8d:2b:89:4b:69:c9:46:63:7d:e9:bc:46:
         d9:2b:7a:ba:04:0b:fc:cf:bb:e2:74:b9:47:c2:99:da:2f:f0:
         18:af:33:59:16:7c:0c:68:af:ec:84:8d:98:30:a0:fc:0d:e8:
         b9:54:0f:a0:3e:79:92:d2:89:73:ac:95:0d:bd:cf:21:ad:1f:
         0e:d8:92:27:f5:91:4e:96:35:31:dd:83:77:37:63:36:fc:dc:
         c2:88:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:27 2026 by rpki-client