Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
File:                     1f74085a-91aa-3331-9a65-b05046d33510.roa (raw, json)
Hash identifier:          GnIAJ2u4Efe9O9raNqHMV8Z32S49mcmHwecu8SljGD4=
Subject key identifier:   13:5F:24:54:3B:1A:47:BA:11:85:F8:B0:16:8B:F6:E8:16:45:CD:3E
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584D1707EAFCF9F229C689079480
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     40716
IP address blocks:        2602:81b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ea:fc:f9:f2:29:c6:89:07:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=80ac095d-034c-44f4-ae3d-f6e69d36f9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:0e:eb:da:25:6f:aa:74:7d:76:17:6d:1d:
                    74:f3:46:54:20:ba:e5:65:2a:4a:70:62:d9:c4:60:
                    4b:d5:eb:c1:f8:32:a6:12:4e:1e:59:4e:cc:1e:fa:
                    59:53:2d:f4:ce:63:a5:2f:7e:4e:4b:01:17:e5:34:
                    c9:ad:96:ae:49:e3:a1:f4:51:4a:96:1d:74:a2:f8:
                    62:f5:90:05:08:02:45:4b:c3:98:1a:63:fb:cd:ec:
                    7f:23:fd:36:3e:96:10:84:ec:9a:81:50:e7:1f:c8:
                    c3:76:27:67:e9:69:03:0f:90:ed:72:ac:1c:e7:b7:
                    14:af:ac:94:eb:14:63:fd:9a:e7:9e:00:ee:08:55:
                    44:2d:59:68:be:0c:9e:51:af:68:8c:74:7e:aa:e3:
                    29:3e:a0:86:32:99:4a:61:6b:40:ee:f0:63:a8:67:
                    05:eb:8e:bf:e5:61:0b:d9:62:89:cd:2d:92:76:a0:
                    7e:11:b6:ff:b0:82:db:38:51:4d:88:98:c5:1e:bf:
                    8a:08:35:b6:73:2c:5f:09:19:63:47:34:41:c2:d2:
                    85:fd:d9:4d:28:23:34:e0:e2:d3:f2:0b:bf:8c:35:
                    73:74:e2:a1:14:e0:a9:af:4a:3b:18:d1:d7:30:48:
                    e0:25:d6:45:cd:ee:57:b7:e0:0d:27:17:68:15:58:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:24:54:3B:1A:47:BA:11:85:F8:B0:16:8B:F6:E8:16:45:CD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:59:cd:17:de:08:15:79:2b:13:58:04:a2:00:30:b2:14:
         42:aa:2c:33:f6:4d:0d:a4:4f:3a:95:ed:ad:00:39:e2:84:8e:
         ad:35:dc:82:58:3a:b3:ae:4d:fb:a5:b5:1e:27:f1:8d:e1:a5:
         a1:92:a3:90:70:1a:b5:45:0c:34:dd:e7:f4:15:ba:a5:22:34:
         55:14:b4:c8:9a:6d:ca:34:e2:33:ce:1f:87:5c:3c:46:36:4a:
         b0:59:32:bd:f7:b6:40:d0:57:46:75:c9:10:88:1d:06:29:eb:
         5f:7b:f6:67:c5:47:96:41:f2:16:3f:3b:82:58:b6:41:85:6b:
         48:d4:46:5e:7d:eb:e9:44:c4:a0:a4:34:24:46:c7:04:9e:37:
         cf:4e:68:60:82:09:4a:38:b7:88:73:04:da:4c:6a:60:c6:bd:
         ed:b2:89:eb:16:93:31:a5:4c:29:50:32:1e:57:c0:3e:b5:37:
         af:8c:98:dd:23:7d:12:34:b8:f5:73:4d:89:3a:f8:6e:03:49:
         50:01:e5:70:14:5b:2e:d5:27:15:7f:ad:d7:e6:1d:a9:12:80:
         9e:72:8f:c8:ff:5c:4d:5e:a0:8d:c1:5e:3c:52:26:77:02:1c:
         4f:6c:65:e8:b4:01:30:20:2b:7a:7f:09:22:5e:2d:bc:8b:e3:
         70:de:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:32 2026 by rpki-client