Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa
File:                     d0fda7ca-a272-33a9-be6a-119b03828638.roa (raw, json)
Hash identifier:          UfZJ2cbjrw6+uIkGZfG3iaeMadwmO/3kuNsyGRPgPSw=
Subject key identifier:   CD:0E:F5:7B:E3:F4:34:0F:A9:17:4F:2F:6D:A1:21:18:04:60:17:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372AB7CAAE73BB359584780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     33363
IP address blocks:        2602:107:4420::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:ab:7c:aa:e7:3b:b3:59:58:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=2c3ad096-7afe-4879-9ed1-d250acef8a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:3f:32:93:48:57:49:8b:9e:67:a7:6a:f6:
                    00:1a:82:3b:5f:03:b1:d8:d3:39:0a:7a:7a:01:d1:
                    3a:ff:98:66:ed:f6:29:9d:c7:9a:17:ca:f1:8a:71:
                    36:e5:27:f1:13:0d:51:a9:cf:06:e4:2e:6a:7b:d2:
                    3f:60:07:8a:59:a8:2e:13:7e:e6:77:40:0b:93:7f:
                    3c:6a:62:1b:20:d1:ad:0a:4d:b4:04:90:24:ba:5c:
                    1e:39:33:7d:52:7f:5a:60:5f:66:fc:3f:d2:22:34:
                    c6:51:f8:12:50:f2:be:03:c2:e2:8b:b2:e6:32:66:
                    81:e0:d0:9a:7b:1c:6b:f0:75:25:a0:55:cf:a4:cd:
                    25:b4:c7:cd:29:6f:9d:d2:46:58:aa:df:e9:ff:b8:
                    8b:95:14:fd:24:30:08:5b:c1:4d:9d:a5:d3:0f:81:
                    99:af:a6:94:05:d3:36:a1:9d:6e:5f:01:87:da:df:
                    d9:8f:8d:a9:b3:d9:1b:dd:2d:8c:32:a5:65:24:d3:
                    dd:92:6a:72:a2:35:fc:0b:54:e6:44:78:61:b6:00:
                    c3:3a:4c:13:86:bc:71:2d:3f:76:72:b3:ba:40:98:
                    83:d7:38:13:94:39:af:f1:2d:77:49:22:84:5c:cf:
                    52:7e:1a:e0:c6:a4:4f:9e:e2:1f:c9:32:3e:4a:e3:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:F5:7B:E3:F4:34:0F:A9:17:4F:2F:6D:A1:21:18:04:60:17:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fda7ca-a272-33a9-be6a-119b03828638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:3c:e8:41:1c:32:af:b6:33:9f:7b:bc:06:f4:fb:ec:2a:
         c5:a4:f9:ba:ad:1f:73:0c:5e:65:81:6e:c6:df:df:40:25:5d:
         6f:04:c5:9f:db:db:d1:a6:65:1c:d5:6c:ab:d8:57:87:9e:85:
         ee:dc:e9:07:9d:cf:e8:69:c4:4a:d1:ed:2b:a6:ae:19:90:41:
         81:b3:17:0f:81:94:46:03:54:38:3d:82:eb:e5:b0:f4:4f:f7:
         34:54:bc:85:01:9b:e5:eb:9b:48:29:77:06:cc:08:15:37:df:
         b5:56:40:3f:fa:29:c1:4f:f0:68:35:b7:be:ad:84:f3:5b:96:
         91:10:1a:c3:95:48:f8:64:24:74:e4:fb:e9:cc:e8:b2:8b:df:
         9f:35:6c:af:5a:e3:84:02:b9:b2:86:0d:8d:19:35:61:33:be:
         f4:22:1a:30:5e:7e:c1:25:12:91:1a:a1:a1:9d:90:cf:c6:b6:
         49:6d:44:d0:22:d0:89:56:57:cd:df:b2:fc:8f:68:50:cd:b5:
         c6:bf:e9:36:d3:e1:0b:97:60:3f:ec:3c:bb:e3:15:d9:7e:05:
         67:83:d5:6d:cf:76:a6:1e:9a:80:69:de:d9:59:f8:fd:67:25:
         7b:3b:2d:d1:c0:c2:6f:ca:7b:45:29:b3:40:40:f6:27:e5:3f:
         ea:da:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:56:51 2026 by rpki-client