Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ec163aa-a35a-3778-9f2c-7c214799ba91.roa
File:                     8ec163aa-a35a-3778-9f2c-7c214799ba91.roa (raw, json)
Hash identifier:          oBx8Y85Pfot+qSGqzMTRauUhyaV8gtQvEj/qgdirIRA=
Subject key identifier:   8D:D3:A5:68:A9:16:69:EF:FF:A4:3D:32:6E:95:92:D2:F8:8D:3A:23
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F352F79B25DBD50D47700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ec163aa-a35a-3778-9f2c-7c214799ba91.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     12271
IP address blocks:        2602:107:e400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:35:2f:79:b2:5d:bd:50:d4:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=8d81cad5-0fe9-47fc-8111-f4aba5bde543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:01:c4:7e:62:bd:bd:9f:6b:54:30:54:db:
                    e6:63:81:a6:fc:98:8e:0e:27:85:d8:c6:0e:5d:66:
                    8a:95:85:0e:3b:8a:f7:41:a5:6e:1a:dc:3e:be:cb:
                    b6:b4:56:d6:17:a8:2d:be:7b:21:67:f8:9e:77:e4:
                    24:08:b9:3f:ca:bf:14:2c:f6:d4:70:2f:ac:bd:15:
                    94:20:12:31:6b:1a:81:8d:d3:5e:5a:82:57:6c:14:
                    35:de:d2:6c:c5:db:b7:c9:0b:99:54:8a:92:25:09:
                    ba:73:70:24:ba:83:be:70:9d:04:ad:38:bb:b4:9f:
                    ea:a0:52:f6:a6:51:1a:98:8c:bd:f5:fe:7d:17:32:
                    74:e9:24:38:c3:69:3b:6a:fd:3f:9c:39:be:d0:0f:
                    9c:d3:62:b0:fd:92:6a:ac:ee:9c:25:d8:ac:84:84:
                    0e:fa:04:f6:41:3a:8b:7c:11:e7:8c:05:c9:7f:71:
                    63:e6:68:f5:ce:77:f4:5d:10:1a:ae:ce:74:03:0f:
                    5d:a7:a5:c3:a2:2a:eb:8b:97:36:e4:7f:ee:7e:9b:
                    98:af:f2:82:4a:2e:2d:d3:4b:e3:e0:e0:1a:79:87:
                    26:59:49:e3:b3:78:05:c2:36:bf:8a:e4:3b:89:80:
                    58:d3:a0:c2:12:0c:4f:59:89:ec:d0:e3:29:f4:a1:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D3:A5:68:A9:16:69:EF:FF:A4:3D:32:6E:95:92:D2:F8:8D:3A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ec163aa-a35a-3778-9f2c-7c214799ba91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:48:17:13:0f:09:f8:2b:e5:ed:30:af:59:30:e5:1e:b9:2d:
         35:8c:9c:84:9f:66:2f:96:51:78:a4:14:fa:67:e4:ad:7a:9d:
         8c:12:bf:98:56:86:81:3d:9a:eb:12:e9:0e:99:6f:31:71:49:
         f2:60:aa:b3:df:a4:7b:8a:28:36:6b:73:7e:b7:2c:e5:8e:a9:
         96:81:81:42:e9:22:1a:1d:72:10:8a:09:0f:31:8a:64:a4:ff:
         73:61:36:2a:83:f5:72:cf:79:9f:cc:8a:b9:35:90:98:96:88:
         f3:78:5d:dd:db:87:5b:35:a1:fd:4c:8e:46:44:00:7f:0b:b9:
         40:a8:9a:30:a3:00:62:3b:93:ca:b7:51:44:84:f4:c5:e2:df:
         c4:48:90:a3:d2:e2:45:10:12:6c:fa:09:cf:4f:20:24:9b:e8:
         1a:c3:80:c7:77:bc:67:02:4c:82:81:66:ea:b5:42:24:a8:ec:
         85:20:c1:4b:5b:3d:e4:93:fb:97:fa:75:eb:9a:f4:70:c6:ff:
         c5:cf:ea:ff:f0:4f:fb:56:da:5c:e6:79:42:79:8f:ca:e9:c3:
         5a:33:ea:c9:1b:b8:1b:ad:71:d5:ea:a0:99:ea:f3:53:44:d7:
         2f:cc:a5:64:2e:a7:de:c5:04:53:8d:f8:e6:2b:fd:15:f4:66:
         4b:90:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:23 2026 by rpki-client