Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
File:                     1f74085a-91aa-3331-9a65-b05046d33510.roa (raw, json)
Hash identifier:          0YFBTCjt/JNA8zpuf8CcnT2ro2caKTHsASl+LFXiff0=
Subject key identifier:   E7:AA:78:DB:23:EA:67:7B:9D:9C:CD:F5:19:D0:A7:8E:75:C7:48:FF
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584EA797B10FFC64DD147FCDA980
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40716
IP address blocks:        2602:81b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:b1:0f:fc:64:dd:14:7f:cd:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6790880c-e592-4d45-9db6-223bac473c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:cd:dd:09:94:bb:08:2e:4b:f6:90:0b:02:
                    63:6e:a8:08:34:32:f1:08:41:5e:09:35:c2:ab:68:
                    30:74:c5:00:61:b5:89:bf:29:bb:c4:23:ec:36:ab:
                    3a:58:2d:90:87:84:18:6d:55:bc:5f:47:d3:e4:b3:
                    4e:4c:a7:52:77:70:7b:e8:80:19:aa:ba:87:10:2e:
                    7e:47:41:a6:85:8a:dc:91:1a:bd:c4:7e:a0:58:b1:
                    8e:01:6a:84:24:dc:d6:dd:2a:f1:d1:64:37:8e:8b:
                    33:34:5a:30:ed:70:de:2d:6a:c2:7f:e8:7f:f1:57:
                    64:2f:39:b5:05:ca:a3:d2:30:31:f6:85:58:7e:c3:
                    16:a7:27:f4:a8:e8:77:4b:db:2f:c7:8a:b2:46:53:
                    60:6a:b0:48:01:7f:c4:66:8c:a6:2c:df:69:a9:93:
                    97:eb:5d:d1:4f:2e:9d:d9:09:bc:56:10:35:7a:af:
                    a5:81:5f:12:d4:6e:d8:c4:8c:af:d0:a1:f3:f3:fa:
                    3e:ed:11:bf:b4:35:af:d1:65:31:19:e3:1f:51:ba:
                    84:37:71:d1:89:11:a0:4d:b3:20:c3:73:89:91:3d:
                    71:d4:aa:df:be:53:74:21:8d:cd:fc:b6:5a:1f:ae:
                    dd:51:6f:3a:49:19:0d:cc:c1:88:ca:fd:ff:ce:92:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:78:DB:23:EA:67:7B:9D:9C:CD:F5:19:D0:A7:8E:75:C7:48:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:92:7b:ec:8b:41:ad:46:8d:e7:c4:81:6d:48:bf:55:df:75:
         aa:fd:d2:d9:9c:4b:2e:89:6a:c5:45:d1:94:59:00:db:82:53:
         40:09:c1:4c:af:a0:f8:f7:f4:7a:0a:d4:cc:3e:56:bf:4e:43:
         3a:0e:3f:f9:d6:2a:28:b0:fc:2e:c0:19:04:e2:71:80:50:06:
         c6:15:e7:1f:de:95:9b:22:d1:a7:1e:e3:e4:5c:88:6a:d1:90:
         cf:82:c1:5d:0c:91:01:a1:81:48:6a:14:06:ca:f8:c2:18:5e:
         57:33:d6:86:12:81:b4:68:21:27:f1:74:27:37:95:75:8d:a6:
         37:b0:ba:57:e8:99:a6:f7:0a:14:d9:5d:e3:6b:b9:d1:ef:77:
         6c:ac:74:53:d0:c6:17:49:04:ec:c3:d8:06:cf:1a:e4:db:f9:
         ad:5b:7b:c3:ff:a5:82:bc:aa:b2:a7:2b:b2:4b:a4:ed:b3:1b:
         c0:6c:2c:82:64:70:ed:72:65:44:e2:83:ad:37:83:95:dc:ab:
         79:e0:31:6f:86:91:5d:0a:87:e3:6b:47:a7:74:f1:3f:c1:95:
         be:cf:b1:be:ee:40:fa:fa:73:58:91:3d:dd:cb:ae:b8:cd:1d:
         3d:db:a9:b5:fe:a1:2d:ab:89:4a:5f:b1:cf:9c:a2:fd:57:cf:
         57:af:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:09 2026 by rpki-client