Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fba0cf6-603f-3f67-b37e-8bac86557154.roa
File:                     1fba0cf6-603f-3f67-b37e-8bac86557154.roa (raw, json)
Hash identifier:          t6Poc1l+bsGWmGTzKuT7Ji+1I/Jk7KKeY2aEN4YAqEc=
Subject key identifier:   1E:26:C8:AE:6E:44:3B:52:93:EE:45:C5:A7:6C:4A:50:8A:78:5E:B4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372030AB1085B595DEF5280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fba0cf6-603f-3f67-b37e-8bac86557154.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20001
IP address blocks:        2602:107:e600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:03:0a:b1:08:5b:59:5d:ef:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=39a08879-9cb7-49ad-85e3-2baf05c93886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:65:5e:e1:50:18:1b:e9:91:96:50:79:d2:
                    fa:f5:cc:1f:09:b7:ea:da:c7:e0:91:47:06:c4:58:
                    c8:23:f2:7c:60:a9:93:a9:83:31:96:85:e0:7f:73:
                    c4:63:dd:84:1c:af:a2:47:4b:42:f7:09:c0:76:37:
                    d4:ae:8b:e1:c7:c0:c0:f3:1a:7e:77:34:f1:06:fe:
                    5e:d9:31:98:0c:c0:35:33:74:35:fb:02:61:f5:28:
                    92:39:7a:f9:f7:ec:b9:a2:10:4f:1d:9a:02:cf:1e:
                    5e:50:1b:68:98:e0:37:4a:15:33:05:2e:0e:b0:4d:
                    27:2b:4e:27:5b:f7:d4:db:18:2e:89:96:6d:8a:d2:
                    8e:2d:de:e8:a4:fd:ed:20:1e:1f:90:2b:b1:87:92:
                    97:01:c8:e2:1e:85:79:2c:8f:82:5b:1c:6b:c3:6b:
                    74:53:5f:9c:56:50:26:2c:2f:e7:16:ad:3e:92:30:
                    45:34:71:7f:85:70:9b:f1:b8:95:85:7a:ac:ec:82:
                    96:16:72:44:60:30:8b:a8:f1:f4:73:d1:53:00:d7:
                    5a:45:01:47:f3:21:45:00:74:c0:46:b4:ee:29:b2:
                    2e:e8:85:74:71:0e:bb:b1:4a:26:c0:60:d8:3e:ae:
                    75:1b:3a:b1:b8:44:38:75:95:07:82:63:84:e6:21:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:C8:AE:6E:44:3B:52:93:EE:45:C5:A7:6C:4A:50:8A:78:5E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fba0cf6-603f-3f67-b37e-8bac86557154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:da:49:76:66:1b:72:e1:a9:e7:ae:20:ca:0f:b4:76:96:ba:
         96:fe:82:ad:df:5a:1c:23:f4:67:49:0f:24:d2:4e:45:94:35:
         ca:18:e4:58:76:fc:2c:24:a3:18:d7:ce:51:96:8e:fd:91:97:
         f8:4c:3d:24:d8:04:cd:f2:1f:06:9e:03:16:f0:b3:72:5a:b8:
         62:0a:ae:4f:bf:38:f1:eb:0f:1d:c4:c4:7a:f9:92:1c:98:0c:
         51:b6:c1:06:c3:7b:8c:05:97:b0:c6:20:84:29:aa:c2:18:8c:
         31:0e:5f:c5:12:ac:85:1c:09:b9:5a:0a:6b:89:43:88:c7:c9:
         c5:77:48:c2:28:d8:3f:e9:2b:b7:a0:08:b3:8a:68:f2:63:ad:
         37:00:94:ef:65:39:84:99:d8:c6:5a:2d:92:0e:2e:bd:fc:14:
         92:71:86:ce:08:8f:5d:44:81:73:86:a1:5a:42:5c:0b:91:4f:
         f2:0b:08:4b:e6:f8:96:b1:ba:be:ad:66:0e:d8:30:45:cd:f4:
         7f:d3:e1:6e:ff:15:6b:9a:f2:74:23:20:94:98:2b:19:e8:ac:
         e0:f7:12:1b:91:80:a4:7b:f6:56:19:da:3f:a8:6d:ed:23:ff:
         52:89:a9:18:a1:58:c9:8e:2a:93:1b:13:27:d4:33:69:f6:7d:
         73:c0:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:55:58 2026 by rpki-client