Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
File:                     840cb531-cc21-3eb3-9286-cda6c5a55992.roa (raw, json)
Hash identifier:          dpQvjQowlKT25x5N4ryaqVv8Gh6WzJ5iqlm8cOMoe5o=
Subject key identifier:   6D:6D:FA:1C:55:08:E7:15:A3:C0:BF:6F:54:17:DA:B1:00:AF:83:AF
Certificate issuer:       /CN=2bd92006-9133-44da-89c6-5e9014a854c9
Certificate serial:       010D0C9F4328584D9E501C1F9C815A0D78A54FC0
Authority key identifier: DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     27489
IP address blocks:        160.79.127.0/24 maxlen: 24
                          2602:f966::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1c:1f:9c:81:5a:0d:78:a5:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bd92006-9133-44da-89c6-5e9014a854c9
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=220f3dc6-584d-488d-af8b-6db34dc6a2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:8f:6c:e3:7a:f6:08:a9:72:bd:19:40:b8:
                    4e:43:23:34:56:7f:21:ef:0b:07:eb:96:3c:03:8a:
                    58:aa:ed:48:b1:04:0f:e4:73:5f:87:3b:71:67:ef:
                    c9:56:17:d4:e2:cc:bf:3a:3d:4a:f7:85:6f:5e:ad:
                    23:3b:8b:5c:85:fb:7a:2c:6e:be:8d:30:93:c0:4b:
                    6f:e9:8b:5c:6a:9c:b0:2a:b5:3b:61:ee:75:dc:c5:
                    46:9f:d0:9d:15:50:a1:c2:b8:80:c9:27:37:82:83:
                    4e:7a:4e:47:2d:f9:1f:e3:4b:a7:84:b7:49:b4:f6:
                    7f:8c:36:39:a4:bd:19:82:b1:8f:dd:07:a5:c0:cd:
                    5b:bd:c2:3e:ba:d4:84:fe:d8:54:d8:0e:3b:30:3d:
                    1b:4c:9c:a0:36:18:75:96:d0:30:37:15:d3:5b:96:
                    f3:fe:be:d3:2f:07:f8:3b:c0:d0:17:6e:2d:1e:33:
                    36:99:3e:71:45:9e:6f:f0:0f:b3:8f:5b:ed:6b:35:
                    ff:8d:5f:4c:5f:78:19:8f:b7:6c:95:dc:66:c9:c0:
                    32:c6:2f:4e:e5:a1:7b:9a:ae:c7:59:b5:db:9d:73:
                    da:37:4b:fd:a3:01:01:df:d5:d8:34:80:37:53:27:
                    0d:2c:dd:7e:96:08:89:73:73:ca:61:2d:1c:b7:e5:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:FA:1C:55:08:E7:15:A3:C0:BF:6F:54:17:DA:B1:00:AF:83:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.127.0/24
                IPv6:
                  2602:f966::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:83:cb:40:a1:89:46:a8:eb:1b:a9:9c:fb:23:fb:f4:2d:6d:
         9c:b2:25:9a:74:bb:cd:25:c2:5b:d4:87:a0:2a:cf:5b:0e:98:
         81:62:5e:1c:9b:b4:5a:d1:e2:fd:18:7f:74:64:1a:b3:bb:1f:
         8e:c1:26:56:81:87:dd:bc:c7:af:19:63:07:bb:7b:25:d7:ad:
         0f:86:69:d9:6f:2b:d1:20:4c:b4:34:f4:90:13:e8:33:9c:c3:
         ee:93:1a:99:6a:26:8c:be:4d:b5:df:2d:8f:b3:55:45:1d:77:
         df:8f:ad:90:a9:85:c7:16:01:2b:d7:e4:23:fe:f0:fe:10:33:
         3e:4d:d7:da:68:31:b2:28:30:a0:59:3b:54:05:e6:c8:ed:6a:
         a2:9f:01:aa:4e:0d:5e:f7:6a:a8:85:44:a5:09:b2:89:63:20:
         02:b5:91:d6:3d:5d:eb:61:ae:cb:56:85:b4:a5:fe:18:f7:29:
         78:3e:7e:d0:e3:39:2b:4b:37:59:b3:c2:ef:28:91:cf:11:fe:
         e9:9e:74:cd:57:5c:e1:dd:c6:85:d0:46:39:ee:34:0d:80:30:
         13:b2:fe:f6:8f:e2:00:01:87:33:f2:17:44:91:f4:21:15:8e:
         f1:5f:86:08:31:1c:f4:cd:49:60:90:ab:5e:22:a3:09:e4:c8:
         74:62:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:49 2026 by rpki-client