Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa
File:                     740a0817-3d71-360d-aa31-2c01a2137f14.roa (raw, json)
Hash identifier:          4xP79dVmzo+Sv4lQb+8I8gev3SuRq2b5IA22iwQt4GY=
Subject key identifier:   DF:09:A4:AF:8F:90:D1:1C:3F:CF:91:EB:EA:77:B9:DD:89:DD:D4:BB
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F4328584E5A4A0524A97CCFF5ECCE2B00
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2607:aa40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:05:24:a9:7c:cf:f5:ec:ce:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=2a6792de-d2ae-43e9-81d0-6352c35c001f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:e6:2a:58:4d:85:34:c9:cd:40:19:a3:7f:
                    de:4f:a1:89:1b:d6:1d:e0:f2:d0:8f:e4:58:b8:aa:
                    53:c2:95:7c:60:68:bc:b5:b8:cd:79:c3:91:83:c2:
                    75:73:bf:cf:0e:98:c0:3c:8d:4e:14:f5:33:c5:24:
                    6b:0b:44:4d:95:ed:3c:27:51:cd:f1:6d:78:8c:cb:
                    95:b5:69:04:c8:b3:b4:4c:61:70:d8:6f:5e:a2:36:
                    35:c8:84:8c:7c:0b:5f:2b:fa:85:11:69:1d:fa:63:
                    e0:ad:4a:95:4f:c7:1c:91:e2:6f:56:9d:9c:d3:6e:
                    fb:96:70:43:2f:1b:f1:ab:67:a8:84:d1:4b:41:a9:
                    e0:9f:cb:b6:32:e2:87:76:de:b1:8e:fc:66:8c:82:
                    7f:19:d6:24:46:87:58:de:bc:a6:5b:52:8c:9b:67:
                    17:62:36:ca:aa:db:f4:67:e2:cc:d7:78:e4:16:06:
                    33:63:d0:4f:3e:20:e1:11:16:a6:be:10:ce:03:9d:
                    fe:1b:71:68:aa:6f:00:a3:fa:10:92:d6:48:65:b0:
                    91:94:df:07:c9:a0:79:29:dd:2e:29:4e:ea:96:12:
                    0b:ac:15:26:5d:30:33:29:26:9f:d3:d5:73:41:e7:
                    8b:5e:57:d5:91:20:09:44:37:b5:71:55:98:1f:1f:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:09:A4:AF:8F:90:D1:1C:3F:CF:91:EB:EA:77:B9:DD:89:DD:D4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:53:83:a0:b1:6c:b8:d4:90:f1:cc:5d:8f:6b:cc:6f:08:
         dc:8d:50:8c:43:e2:17:e1:6a:47:5e:d6:e7:1c:74:71:b0:e2:
         98:a8:c2:69:58:c1:41:27:86:f5:81:9e:e9:c6:70:a4:8e:2e:
         68:55:a0:f3:24:2c:20:4d:0d:81:cd:fa:4e:db:37:20:34:f5:
         6f:e0:b1:ab:d0:76:a2:92:c9:ae:61:a3:86:64:52:26:ef:8f:
         18:f6:95:0f:2b:5a:cb:ad:4b:2d:a9:4a:95:87:e4:c1:b6:f8:
         39:1c:38:12:4c:ba:59:4a:3a:a9:cf:aa:70:75:67:5c:42:ef:
         0d:d2:30:b5:d3:ea:79:f8:a0:5f:58:fa:3d:f6:ac:0e:6f:d3:
         8e:0f:5f:81:94:eb:1c:52:ce:5b:6b:a1:04:32:73:de:f6:4d:
         e9:f0:b3:cb:ba:58:32:a8:f9:3f:d3:c0:ef:99:52:87:9e:1c:
         c2:75:16:56:f2:e2:03:61:42:7c:91:c3:67:64:43:bb:3d:19:
         33:b7:c1:73:cd:de:10:b5:ad:71:c7:32:28:02:bb:fb:d1:38:
         0d:6c:70:c9:77:32:f1:aa:11:53:4f:46:2c:7f:89:bb:52:dc:
         b0:1d:13:ce:8d:c3:c0:33:f2:73:98:6e:82:1a:7c:7b:30:ae:
         84:00:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:21 2026 by rpki-client