Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
File:                     40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa (raw, json)
Hash identifier:          EXbfNf8LkZNEd6yYIzJUIly1rgN8Wd2w8jyAnJCxuk4=
Subject key identifier:   DB:82:4C:29:00:5A:B6:62:BA:9C:49:74:78:5F:87:8C:79:96:C3:DF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E78FF7D6142E4FCAF7BE52FC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     3257
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7d:61:42:e4:fc:af:7b:e5:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=cab00249-83f9-4a63-950b-254e1d195bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:a5:ef:1b:89:35:7c:4f:76:20:f3:c7:96:
                    2d:36:aa:27:9c:3d:69:7b:98:53:64:ba:7b:0a:3b:
                    0b:d5:c2:c4:8e:e7:94:56:4b:8c:2e:1b:38:c8:9d:
                    74:d1:8e:68:83:78:85:77:54:cb:da:35:25:3c:ba:
                    a6:f0:97:52:81:f7:6d:81:cf:47:42:d0:c6:5d:2a:
                    64:4d:f7:a6:2b:cf:05:c8:18:45:05:5c:e9:84:dc:
                    94:0e:82:5f:f7:ec:5e:fa:19:6c:09:3c:91:77:59:
                    21:57:fe:f1:5d:91:f4:9e:c6:94:a4:99:a3:d9:bc:
                    75:13:82:0b:c9:76:25:ff:8a:a8:b3:04:f8:a9:5f:
                    84:3f:f4:26:99:0d:a0:02:5f:de:59:bb:57:61:1c:
                    70:80:fb:92:1e:60:36:49:1d:19:e4:76:d7:95:97:
                    8d:64:10:46:fd:99:dc:b1:31:e4:26:bd:7e:87:dc:
                    90:13:06:ae:28:ab:87:03:8c:2c:96:92:23:8c:08:
                    f5:25:fe:e5:ff:e7:46:42:63:fc:3d:27:55:0d:94:
                    49:89:ac:db:13:12:71:4a:ed:a4:56:4c:af:6a:96:
                    9c:60:39:bf:6d:f8:6b:b5:f1:1f:31:b8:ee:b0:e1:
                    58:77:b8:f9:c4:05:35:47:48:f0:e5:97:e4:cc:df:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:4C:29:00:5A:B6:62:BA:9C:49:74:78:5F:87:8C:79:96:C3:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:61:af:1b:cc:d1:1c:f1:26:4c:c3:d2:f3:55:46:0c:fb:
         9e:12:86:d9:d7:24:79:55:6c:dd:82:57:66:49:1a:1f:e1:f1:
         1f:d7:03:eb:0f:16:3d:b4:cc:07:5c:fb:ba:3b:24:d3:43:6b:
         14:8f:80:e8:11:a6:5e:81:50:65:eb:5e:3b:20:83:77:23:d0:
         11:c4:cd:6f:6b:80:b7:12:f7:46:bf:0d:2a:28:86:dd:30:50:
         24:4e:08:44:6e:29:b9:a8:2f:91:65:6a:91:03:0f:a9:a9:6a:
         4e:a7:a1:5a:0d:47:29:4f:20:0a:0a:6a:a7:08:e7:c3:5f:61:
         f4:f7:40:10:32:78:76:03:33:43:5a:ca:0b:dd:8e:8e:30:94:
         17:3b:39:37:39:b4:46:92:30:32:84:d4:70:be:78:dd:c5:0b:
         ce:02:93:fd:d0:fd:94:a0:82:03:db:0d:b9:46:47:34:60:5a:
         8d:8c:9f:57:70:30:9d:f7:9c:4b:d2:26:c2:23:64:3b:16:a0:
         15:40:57:a4:5e:1f:9f:32:f4:cf:9c:cf:2a:a6:90:df:1c:31:
         6d:3a:42:ab:29:fc:ad:c5:3e:be:4d:f6:08:ea:16:36:78:3d:
         b8:66:d6:8c:90:0c:5c:b7:de:17:0b:52:ec:28:ff:30:26:7b:
         24:98:64:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:21 2026 by rpki-client