Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/8ad60976-af7d-312a-b659-7d672df91c6b.roa
File:                     8ad60976-af7d-312a-b659-7d672df91c6b.roa (raw, json)
Hash identifier:          4rJYysnNeMnjMc3fzHZOZQswfKovd0vsaiQl8dWCUPQ=
Subject key identifier:   8C:09:E0:90:58:D8:D5:4D:E5:EB:28:D0:55:54:8B:62:33:9E:B9:C4
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F4328584D7CCFDB5E2051BD24E4EF1700
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/8ad60976-af7d-312a-b659-7d672df91c6b.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     55194
IP address blocks:        2604:5480:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:db:5e:20:51:bd:24:e4:ef:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=c0d3899f-2fe9-415d-86ac-b95f5a7a4040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:05:e7:20:07:9b:69:72:2f:f8:77:f2:a9:
                    52:09:86:21:b1:ce:70:c1:ac:fb:30:50:59:f1:a3:
                    99:75:86:c9:d1:cb:99:c5:14:14:53:ee:f2:57:7a:
                    1e:ce:2c:bb:c0:59:0e:1e:a4:e3:9f:56:17:a3:26:
                    1c:9a:a3:f1:b5:a8:0e:81:81:cc:2b:07:22:4d:5f:
                    78:fc:91:48:1f:d4:bd:ab:f7:2b:56:fb:e5:0c:94:
                    cf:9a:b7:a4:9b:a8:a2:78:d8:a1:e7:c4:4d:30:3a:
                    ab:67:e0:3e:c9:69:5b:54:44:5d:7a:37:a1:a2:8a:
                    96:2f:84:04:3f:b7:9a:2a:88:2f:c7:86:13:dd:0f:
                    53:7b:ef:d1:2e:9d:02:fa:20:af:73:8b:76:c4:3a:
                    86:55:d2:8e:a6:ed:65:7c:46:14:e2:42:9c:14:df:
                    ca:c7:4f:4c:f6:53:21:45:dc:dc:ad:a2:42:8d:c9:
                    34:b9:ef:c2:b8:c7:6e:30:4a:ee:2f:d9:d7:fa:cf:
                    ac:46:b0:b3:c0:5b:c5:2e:19:e8:61:4f:09:3e:6f:
                    a9:a8:94:77:e6:ff:61:dc:96:f9:e4:67:42:c5:15:
                    d3:ff:c1:9d:82:8f:d4:57:a4:57:66:38:88:87:9f:
                    7d:94:1c:90:26:ca:fb:be:0f:2a:1b:b7:2c:41:25:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:E0:90:58:D8:D5:4D:E5:EB:28:D0:55:54:8B:62:33:9E:B9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/8ad60976-af7d-312a-b659-7d672df91c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:29:d4:85:2c:90:81:4e:da:85:6c:99:09:05:74:8d:1f:a9:
         b1:eb:f9:97:da:99:b8:fb:51:9e:99:11:ef:68:d2:7d:a7:f2:
         3c:0f:4e:07:4a:84:2f:c1:48:dc:b5:14:a3:3e:96:e9:7b:fa:
         2e:40:5a:ef:bb:6f:06:a8:4e:f9:76:fa:e2:28:8f:86:f0:98:
         c4:c0:55:ce:d8:72:df:98:5f:80:c1:52:8c:70:61:a5:de:19:
         cb:c6:73:85:bc:81:34:0a:60:58:5f:68:dc:20:f1:59:64:6e:
         c8:9a:de:82:ad:d0:0e:c1:9b:23:32:03:c0:05:0a:83:ed:27:
         47:f3:05:c5:e2:26:ac:9a:3f:1e:d5:bb:7f:f8:10:94:9b:c6:
         38:40:05:30:34:ba:1e:20:8f:03:9c:1d:5d:00:a0:07:bf:c7:
         d0:97:26:94:e6:74:34:8e:5a:ae:06:96:bb:f9:69:08:cb:04:
         47:54:a4:29:e2:38:c1:ee:ac:e5:b8:11:e1:f5:9c:99:dd:4e:
         67:d2:ea:b6:73:d5:5f:be:6f:f0:48:06:86:e7:00:de:4b:7a:
         64:3c:02:16:cd:43:a0:a9:05:e0:94:ef:a9:a9:82:82:af:09:
         60:23:8f:78:58:e6:fa:a1:ee:31:cb:20:78:f8:20:2d:fa:93:
         21:2c:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:42 2026 by rpki-client