Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64d8ce10-beec-3ceb-b2b9-b34cbbbcebd0.roa
File:                     64d8ce10-beec-3ceb-b2b9-b34cbbbcebd0.roa (raw, json)
Hash identifier:          pjXIHqoZdT3WpFSIGbYh7VarwAUBpBPqQYRCQ0PIBgc=
Subject key identifier:   80:58:8E:F7:4E:E1:A4:76:8F:00:F1:12:CA:3A:3C:A6:6B:F1:69:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D91C00EA45E7921C382F93240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64d8ce10-beec-3ceb-b2b9-b34cbbbcebd0.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     23222
IP address blocks:        2602:107:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0e:a4:5e:79:21:c3:82:f9:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=ec76e628-1223-4ab5-8df6-71ae34b905fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:34:00:cc:eb:f5:e7:6c:63:da:7e:fe:98:
                    75:af:55:5d:a5:55:48:00:21:11:05:0d:12:62:09:
                    58:f3:25:fb:88:44:c9:d0:d6:48:d9:dc:92:69:9c:
                    7b:77:43:02:e9:cd:b7:52:0b:67:07:e5:33:66:fa:
                    9c:6e:6c:a7:74:5d:fd:95:45:75:9d:76:45:cf:7e:
                    80:5d:4b:0a:64:20:9e:c5:8e:30:e7:4b:68:7d:f2:
                    bb:6b:98:af:a8:b6:fe:b4:1a:3d:eb:ab:8c:8a:2d:
                    f4:8f:e6:45:6d:62:14:06:d2:67:f2:61:fe:83:73:
                    2d:57:d9:2d:2f:e2:05:24:f5:6e:21:a9:9b:a7:e4:
                    6b:c6:38:27:9a:b5:f9:b6:eb:6e:6e:e6:ca:89:c6:
                    29:fa:19:a5:a1:f0:32:b8:9e:ee:ae:ce:44:17:46:
                    f7:a4:1d:b4:4e:ba:52:1c:14:3f:c0:ee:23:0f:fe:
                    ae:06:71:c0:27:ef:28:9a:ba:cb:59:a3:3c:13:42:
                    70:ae:85:26:d1:ab:f6:bb:2c:2b:ae:80:f3:d0:7a:
                    c8:79:c7:ab:2b:9e:17:25:4f:e2:6f:aa:17:dc:c4:
                    76:4b:48:de:76:d3:41:ae:ee:84:74:0a:28:aa:c0:
                    98:e4:2b:39:d3:e2:5e:40:8a:4d:fa:c5:6c:53:28:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:8E:F7:4E:E1:A4:76:8F:00:F1:12:CA:3A:3C:A6:6B:F1:69:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64d8ce10-beec-3ceb-b2b9-b34cbbbcebd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:74:9b:ee:0d:f2:2f:41:cd:6d:58:1a:13:dc:45:96:e5:
         a7:c9:39:27:6b:51:3e:28:fb:cd:8b:99:d6:30:c8:1d:cc:c4:
         36:7d:08:49:1b:5f:98:05:89:5e:3a:30:16:1c:3f:b8:a8:a0:
         5a:b8:ce:0c:07:3b:c0:43:70:36:be:3e:e6:df:1d:19:81:09:
         65:dc:ca:0a:98:1c:47:53:f0:4f:1f:70:c4:0f:f8:69:cf:02:
         4d:24:57:77:58:27:fd:a3:4f:e4:b5:d8:77:75:ec:d8:eb:2d:
         e3:19:af:3e:41:bb:18:08:9e:c9:4a:ea:70:64:48:34:a3:d8:
         83:30:9a:e8:c1:3b:b5:16:bc:f0:dc:89:05:ee:75:76:81:66:
         1c:0c:07:89:75:cf:d3:5c:0d:29:95:94:e7:46:ed:90:89:19:
         45:46:c4:67:d6:22:d3:07:b0:3a:20:ee:fe:f8:00:87:58:d9:
         f1:c8:2c:1f:ec:f0:0a:04:79:32:0e:f2:27:40:6e:fb:8e:c4:
         fc:f3:9f:fa:7e:d1:05:4a:66:a0:52:f5:34:6d:dc:9c:5a:9a:
         c5:43:0a:51:09:c3:be:1c:83:f0:5c:f4:f8:95:b8:ca:b7:2e:
         68:e2:3e:f8:b6:e7:01:eb:b3:d6:3c:b6:67:49:17:1c:51:7a:
         f1:87:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:44:49 2026 by rpki-client