Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/15d99dac-b005-3f6c-9bf8-174e5d70740e.roa
File:                     15d99dac-b005-3f6c-9bf8-174e5d70740e.roa (raw, json)
Hash identifier:          bnGNIlX2+lYerJ9Cc/48vwBfDsHUVEC2v/q0+D/68v0=
Subject key identifier:   62:C6:C4:61:99:4E:80:25:6F:0E:67:1B:66:90:8E:60:B4:74:7E:F2
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584ECD372B158E560A7BF9C43380
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/15d99dac-b005-3f6c-9bf8-174e5d70740e.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     63023
IP address blocks:        2607:a140:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2b:15:8e:56:0a:7b:f9:c4:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=0bd1a8df-9527-4f73-9172-c4970ee79b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:62:b0:d1:00:cd:83:2c:63:83:bc:80:0b:
                    00:83:0a:67:b5:1c:0c:67:f4:0e:0f:5a:49:2c:8a:
                    b4:6a:cf:68:e0:00:31:d1:9b:7f:84:ef:b3:d4:9f:
                    9f:97:35:fc:2c:a1:3d:18:41:5e:90:38:d6:de:36:
                    30:f9:31:55:71:27:b5:b8:76:2c:10:28:c7:53:d3:
                    e4:dc:e5:d3:39:04:a8:eb:6c:12:4a:41:b1:46:05:
                    85:db:a9:b3:c4:69:b1:b6:b5:e2:89:83:c0:f0:c3:
                    46:e8:48:7e:e3:d5:6e:d3:71:1a:85:c9:73:c2:e8:
                    4c:25:4f:56:f8:22:25:23:10:78:63:bc:ca:a4:22:
                    5d:7e:4a:60:63:05:10:0a:0f:6d:a4:d5:ed:cf:30:
                    b2:6f:f9:a7:d7:bd:e1:2f:f8:b0:35:99:22:d7:f3:
                    da:34:56:a5:5b:f1:61:a9:e5:dc:20:a8:7a:7b:e0:
                    50:5d:cd:27:84:7e:55:c5:6c:1f:f1:c1:8b:4f:a8:
                    7f:f5:7d:d8:73:0b:08:49:a0:5d:e1:75:f6:0b:ad:
                    0f:e4:30:b7:bb:08:37:98:5e:d7:3e:09:46:0f:29:
                    7c:e8:c8:54:ca:75:29:ab:44:ec:9e:94:46:56:4e:
                    6e:6a:e2:b5:f6:42:b9:89:b7:e5:ff:08:7c:52:f8:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:C4:61:99:4E:80:25:6F:0E:67:1B:66:90:8E:60:B4:74:7E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/15d99dac-b005-3f6c-9bf8-174e5d70740e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:14:6a:86:96:a8:ca:be:0d:5e:9e:73:f8:88:4c:36:cc:
         44:57:2c:61:3a:d3:ff:5c:9b:bc:b0:2b:6c:d5:c7:c2:83:99:
         e8:45:6a:ae:58:17:89:d4:bb:52:c1:8b:24:dd:14:6f:ea:58:
         db:a2:66:ca:5f:71:ed:19:93:1d:ac:0d:3e:ed:a6:7b:a0:e6:
         49:fd:4c:3c:95:2b:3e:00:0a:31:54:7c:19:67:44:09:4e:94:
         2d:0c:6b:70:ce:ab:04:62:47:cf:42:9e:fb:70:c4:06:84:91:
         55:d0:4f:0a:6b:07:6b:c3:d2:4e:98:5c:ec:8e:ac:2e:b4:38:
         55:bb:ef:66:e7:58:e9:c2:69:f9:15:ed:0b:37:87:12:ea:9f:
         59:48:73:67:56:5b:60:74:54:70:a6:cd:57:19:90:90:33:a6:
         77:d1:a3:ad:4e:6a:0d:45:ee:98:c9:3b:e9:48:c6:b6:87:41:
         44:5a:9b:84:3b:5c:92:68:1a:e8:a6:59:15:45:08:4b:4f:f7:
         6a:4f:7a:03:d2:6e:5b:c1:1e:56:d9:7e:ba:65:d0:20:0e:84:
         0f:a6:e7:45:85:33:5c:d6:80:3c:91:47:eb:92:2d:62:54:22:
         14:81:22:db:24:ab:27:2a:5e:4a:c8:a4:30:b0:cd:bb:84:ac:
         37:05:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:49:41 2026 by rpki-client