Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa
File:                     21241b13-92d7-3d56-a386-ac8cf5db5dce.roa (raw, json)
Hash identifier:          CDFyRlJE+5AiAfpoi4Eq/tsf20DU08DTla6iW+w6axI=
Subject key identifier:   76:0F:3D:64:43:88:D0:29:40:0E:98:EF:70:7E:2F:E4:8D:2D:38:A0
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584E6C6F6BB648C631D20DE69C00
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     401362
IP address blocks:        2602:fa42:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6b:b6:48:c6:31:d2:0d:e6:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=a0c0762b-823e-4baf-a7f1-86f044fe93de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:f3:01:99:b4:14:0f:fe:2a:66:bc:00:77:
                    95:39:15:5b:22:37:6a:2e:6f:54:e3:ec:a8:52:60:
                    2e:73:87:dc:d7:78:30:65:57:7e:ae:40:15:85:85:
                    a0:cf:73:47:d9:ae:fd:85:17:74:a8:a5:ee:2d:a0:
                    65:68:b0:b3:bf:24:b5:95:1d:6f:c6:8e:72:36:bd:
                    c0:12:4c:68:40:27:ac:1c:5a:36:06:5e:d2:ee:f6:
                    06:09:f3:67:ea:21:ee:10:f1:ae:39:ae:27:7b:ae:
                    03:37:72:83:be:a7:d2:a4:fa:7d:c0:d2:4d:0b:dd:
                    50:1a:4d:b6:21:af:0a:5a:dc:2d:c0:95:eb:11:e4:
                    0b:ad:ed:8f:50:27:2c:9b:22:38:94:ba:02:91:67:
                    7b:a4:1a:07:55:30:0b:cc:3d:ea:d8:81:92:c2:bf:
                    65:ff:c6:22:99:c4:c4:6d:6b:2f:48:24:88:09:ad:
                    ce:5a:6d:55:29:9b:f0:bd:99:78:8c:81:b8:1a:5f:
                    81:31:dc:2c:96:cb:14:3d:0a:99:03:32:65:ea:78:
                    73:52:08:26:3c:7b:1c:ea:5e:f6:77:56:f2:0e:c7:
                    2e:b5:4a:f3:a1:20:4d:f9:ae:e9:7f:6d:40:f9:bb:
                    6b:84:3d:3d:4d:18:47:05:f4:31:24:f3:8a:ce:7e:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:3D:64:43:88:D0:29:40:0E:98:EF:70:7E:2F:E4:8D:2D:38:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:ef:41:62:12:6b:3d:76:9a:a8:0d:36:3d:f4:6b:b3:a8:
         bd:fc:76:10:6a:ad:66:e6:18:bd:d0:89:af:3d:25:84:8e:6c:
         e9:c6:b6:f0:73:c2:43:26:c2:54:f5:17:5c:85:24:4e:c7:c0:
         a8:ad:ab:1d:6d:22:a9:3d:4b:00:53:c8:bf:ea:7c:bc:f3:c3:
         0f:1c:c1:4b:05:90:54:e8:9c:1b:45:45:ea:f4:3e:07:81:26:
         03:1f:61:67:52:22:f6:2c:d5:7d:13:be:28:25:5d:7c:ab:69:
         e0:5e:66:81:14:73:eb:12:96:98:50:cd:ef:6c:34:25:ea:8f:
         1e:ea:8a:52:50:eb:69:af:95:fe:af:22:da:9f:4f:7d:ba:b0:
         4a:10:e5:2a:89:f1:c5:6f:ee:23:25:96:56:51:ba:fa:20:7c:
         01:a2:76:27:ef:09:4c:7b:10:b8:d8:05:ff:f2:96:f0:73:4c:
         d4:27:c7:27:6f:b3:38:d1:c8:18:82:c2:28:b0:f4:2a:e4:53:
         1d:06:2f:80:d7:66:e6:c8:5b:74:11:27:1c:e3:70:15:e5:d8:
         6e:dd:50:52:03:01:ee:d9:4b:9e:58:ef:d8:1f:96:37:e3:b3:
         50:7c:7e:9f:21:90:2e:0e:9a:69:fe:91:17:f7:3b:98:a2:af:
         77:58:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:16 2026 by rpki-client