Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa
File:                     cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa (raw, json)
Hash identifier:          pDz74f6wmFYIj1lE9y75OEWoJ/EUmpWYh3SNNNuebp8=
Subject key identifier:   A7:A7:66:6F:07:95:0F:36:EC:C2:EC:ED:86:57:F0:AA:F7:F7:67:4A
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584EFF777C76CFFF680CDB1E17A0
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        2607:a140:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7c:76:cf:ff:68:0c:db:1e:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=42110d7d-1694-4435-900a-e419b32a359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:74:08:09:43:31:da:c7:66:34:6b:90:3b:
                    7d:b4:43:4d:35:68:9e:7c:45:69:e0:94:7d:77:d9:
                    6b:2b:00:0c:16:1f:89:68:69:6e:c8:a9:a7:89:6f:
                    4d:9d:ef:df:1d:18:28:25:7f:a5:20:f7:7c:54:7d:
                    d2:72:d2:26:e3:cb:47:d5:28:eb:49:f9:de:a2:f7:
                    e4:31:51:ba:9e:24:cc:b0:94:cd:23:66:5b:d3:3c:
                    8c:5f:21:c1:7f:cd:a1:e4:fc:65:ff:3e:f2:8e:99:
                    b9:34:dd:60:11:cf:2b:6b:58:4b:24:a3:69:5b:c5:
                    35:6c:81:d7:c6:a1:37:75:27:47:a7:af:59:69:10:
                    54:27:05:e4:3e:71:77:25:dc:e1:08:5e:e8:56:2b:
                    4c:06:41:85:63:42:b5:d4:69:95:33:d4:a5:92:47:
                    65:79:69:d0:c4:24:19:ac:b5:b1:71:de:c0:cf:78:
                    89:17:28:74:b5:7f:3f:85:33:10:8f:89:bb:49:d1:
                    9a:25:38:07:04:fe:b8:8f:39:62:8e:b9:43:6e:f5:
                    44:77:2b:eb:fd:f3:e4:98:38:cf:f7:df:27:27:9c:
                    86:59:75:5a:42:ac:d9:c7:b1:a8:2d:15:12:06:6f:
                    af:22:78:ed:a6:1b:7e:d7:0a:e1:24:04:58:94:4a:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:66:6F:07:95:0F:36:EC:C2:EC:ED:86:57:F0:AA:F7:F7:67:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/cd92c67d-b1d8-3ebf-887e-a1efa58821db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:13:a2:ef:9a:b5:e6:a7:20:3f:d6:e2:fb:1e:53:6c:3c:
         cb:9e:52:2d:e0:3f:d2:89:33:f8:5d:67:7b:fc:7c:ab:96:e3:
         43:39:6e:97:18:b5:77:9f:62:04:3e:fc:5f:ae:e5:ff:f0:a5:
         d9:70:84:55:97:f7:51:32:d7:fa:86:5e:3b:72:9a:ae:f3:c1:
         37:ae:3f:85:c3:33:8b:5a:e7:fc:9e:eb:45:a5:c7:05:51:93:
         37:15:8c:9e:75:16:da:51:05:59:b7:d0:81:c8:8c:29:59:b1:
         0b:76:2a:b9:b8:c1:25:d6:24:b8:04:0f:9a:e8:71:65:39:db:
         56:68:a0:e1:95:96:f4:a8:f7:c2:72:84:7b:8c:f3:eb:ea:08:
         27:2c:ca:ea:b2:e4:d8:10:72:94:30:9a:fd:19:f3:b4:d5:5a:
         96:63:f9:d2:ed:07:f0:f6:cd:74:7e:6f:20:9e:f6:f7:5f:92:
         58:13:fb:a9:40:20:da:69:f2:01:26:df:52:67:90:ef:10:11:
         83:8a:70:6e:8c:94:64:d9:fb:ca:7a:b3:fc:f2:5c:13:5f:fe:
         4f:78:d4:b2:da:3d:7a:80:24:85:d6:4d:b5:9c:06:b7:17:80:
         c6:bd:08:21:03:82:cc:07:e7:b5:3b:3c:e3:cb:69:43:b5:db:
         6b:6a:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:49 2026 by rpki-client