Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
File:                     d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa (raw, json)
Hash identifier:          OUAVJw9ZBD0XdLARgXUT2l+a8qeqcXGoCoVJt3XHEi4=
Subject key identifier:   19:2A:CB:0C:7A:1C:0F:40:8E:7F:06:26:74:2E:84:FE:18:0C:94:BA
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584EA787D0FBC2D375C752A0F060
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397666
IP address blocks:        2602:fd9e:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d0:fb:c2:d3:75:c7:52:a0:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51eb5562-9d10-4ebe-ad9e-45761273308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:c7:45:ce:d3:b8:e8:28:a7:81:98:1f:a4:
                    e9:24:c2:c1:c5:28:ad:e1:86:52:7e:ae:7c:51:32:
                    ff:ef:f5:4c:2f:ca:eb:1e:ac:64:7c:fb:5a:45:38:
                    5b:d9:19:28:55:d6:d9:a4:ef:4b:e4:12:51:ab:e9:
                    3e:a0:0f:05:8f:78:77:d0:00:4d:9c:4b:20:0c:5c:
                    04:e5:47:3a:e3:fc:0b:6d:3f:d4:c6:46:66:f4:1e:
                    a1:77:ee:c6:da:f1:14:c7:03:25:1f:22:39:85:7f:
                    8b:f0:23:e3:e1:bc:d6:05:0f:c1:9c:c0:de:4f:79:
                    10:03:fb:03:68:43:f2:88:90:a9:65:f8:c7:c2:7c:
                    56:a6:c9:1e:bb:5e:a5:4e:72:3d:83:9a:7b:59:a7:
                    33:52:5d:dd:49:45:7d:eb:30:d2:78:38:b0:cb:c6:
                    d6:44:17:b2:56:fb:3c:66:f4:ad:eb:9a:b8:df:6e:
                    9f:4a:9c:7b:41:e8:7c:d7:05:47:c7:ec:5a:46:2a:
                    9d:f2:05:89:1d:f5:02:9e:cf:64:43:ff:bd:1a:a2:
                    ab:57:cb:ef:ce:81:83:50:da:0d:b1:94:98:d5:ae:
                    73:c9:a4:d2:a2:f4:a5:51:d9:d8:a1:60:14:35:63:
                    9e:f9:1b:fa:43:83:14:4f:ec:30:4f:5f:2a:40:14:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:CB:0C:7A:1C:0F:40:8E:7F:06:26:74:2E:84:FE:18:0C:94:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9e:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:0e:db:43:13:db:e1:e6:11:4d:35:71:44:a3:51:7b:e9:
         6c:4b:85:9e:23:b8:d1:98:66:26:c5:55:ae:9a:72:8b:d4:02:
         10:42:2d:de:f0:c8:11:f5:23:f9:e0:86:0d:cf:87:23:5f:33:
         95:03:9e:a5:c6:f8:fd:bc:06:64:99:3d:49:1e:fe:4b:1f:00:
         ef:b2:c4:0a:5c:57:ce:bb:d4:a7:5b:42:fe:81:6b:7e:41:40:
         87:07:51:69:8e:3b:83:07:6a:d7:48:66:f4:5e:4e:75:92:c1:
         5e:38:5f:5f:58:22:0a:e9:7b:62:ed:52:43:e9:fb:3b:a7:86:
         d9:85:16:dd:ef:fa:cd:4a:5f:b8:91:0a:0c:cf:02:a6:0c:b0:
         bd:92:5c:98:ad:90:ca:99:09:4d:1c:0f:fc:33:00:39:12:a2:
         18:95:76:8a:ad:8e:2e:b1:b7:0d:08:4d:32:59:78:15:e5:49:
         ca:79:c3:d7:a9:68:ae:3a:e7:22:ac:c4:23:45:b7:45:f3:99:
         af:c4:95:c7:67:d5:34:17:7d:f8:ec:23:b5:f8:fe:89:61:8c:
         be:c4:5f:9e:da:d1:8a:b5:ce:a8:78:d4:1f:0a:7e:2a:b8:fb:
         31:18:b8:0a:42:2a:aa:bc:4c:42:7c:ad:b6:ea:32:b5:37:dd:
         c2:06:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:07:04 2026 by rpki-client