Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
File:                     c74085ab-914c-3b60-852c-80bed856182e.roa (raw, json)
Hash identifier:          jBNY/odX45QI11iPGaiVMki1ApcE9zvxc8QXpzu4m6A=
Subject key identifier:   3F:AE:3A:17:94:44:38:BF:2C:AC:98:65:FF:DC:7B:DA:5A:CF:0D:B5
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F4328584E0005E1B37CDC1BABE9881C00
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     29848
IP address blocks:        2604:9b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e1:b3:7c:dc:1b:ab:e9:88:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=71e67296-7fd4-40d0-99ed-44a444ec5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:c2:23:6f:e9:03:8c:5e:a7:0c:73:33:e4:
                    85:4d:11:02:a4:51:bc:e0:6d:3a:f4:b8:8b:78:37:
                    ad:d6:3b:14:4d:48:4f:1d:7f:3b:ee:49:4d:06:77:
                    de:e5:58:6c:29:0c:0f:5a:eb:89:ba:74:0a:48:13:
                    8e:7f:a5:be:b4:a1:3c:36:ad:e9:c6:81:ee:d8:de:
                    ea:c2:b6:1b:e0:0f:5a:5d:3d:ab:1e:12:3a:95:fc:
                    f1:e3:d3:06:b2:ad:7a:86:9c:5d:c5:b8:41:6a:88:
                    ec:42:35:ff:24:49:d0:94:26:83:c7:83:3f:21:52:
                    7a:5e:33:a7:4b:86:69:2a:75:1a:0e:77:ef:57:ce:
                    9f:12:92:6f:41:17:8f:d6:92:f3:ee:8a:87:7f:4d:
                    32:56:01:31:d1:bf:9f:68:8f:54:01:bd:e1:14:71:
                    ed:bf:8b:3b:77:8e:08:65:64:b5:f6:d9:7d:aa:c5:
                    c8:fe:69:96:69:5e:bb:fd:97:c9:a1:33:08:63:be:
                    d0:60:d7:29:75:ae:0a:0b:af:5d:f8:a8:99:8c:72:
                    a0:c0:de:cc:d2:fd:5c:65:63:e3:07:41:33:76:27:
                    10:f5:2b:b1:44:57:12:51:fe:ce:ce:14:d2:d0:04:
                    1e:96:38:6a:32:f8:c6:61:de:db:ab:cd:ed:0e:05:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:3A:17:94:44:38:BF:2C:AC:98:65:FF:DC:7B:DA:5A:CF:0D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f7:d6:f0:b8:b1:f9:72:25:2b:34:8b:88:84:89:26:45:e8:
         55:12:e3:14:4c:70:83:82:08:81:08:b0:10:4a:c6:28:58:ce:
         79:dc:b5:61:79:a6:e0:85:30:f3:c2:0c:4f:31:27:79:a9:fd:
         cc:7b:79:10:11:a2:c9:ab:20:55:6b:26:47:0e:ad:fc:fe:95:
         9b:20:07:e4:73:02:e4:da:64:6f:59:1c:73:2e:f3:0c:4f:62:
         ca:49:55:e4:9c:dc:7d:8f:14:ad:7b:f2:db:49:3b:57:07:47:
         c6:e8:fd:a1:79:ff:1d:c1:50:c2:33:1c:f8:25:bf:53:77:42:
         d6:62:22:ca:80:09:96:08:b0:1f:1f:f5:49:15:51:19:b0:3c:
         33:b0:fb:32:52:30:b2:33:d1:07:26:64:b2:12:e0:df:31:a0:
         cc:d2:c9:8d:9f:37:4f:a6:a8:e1:1f:fb:c1:01:a0:d5:16:c3:
         18:09:b1:85:e3:1e:09:0d:a2:4e:0a:06:38:c8:6b:57:7d:b0:
         8b:6a:89:3c:34:84:37:5a:d5:e8:e7:bd:ae:81:5e:14:89:17:
         a4:19:08:b1:51:83:1d:af:b9:68:f9:d6:4d:36:45:bb:98:2b:
         d3:b5:93:a9:aa:3c:3a:d5:0d:d9:45:65:08:10:56:35:87:9a:
         a4:28:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:13 2026 by rpki-client