Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa
File:                     bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa (raw, json)
Hash identifier:          iG5w2qX67yZubklzG2YofkTY7rQ/89gdCF1VvaoNu+Q=
Subject key identifier:   9E:0A:B6:7C:E9:E5:98:D6:44:B4:EE:2E:52:88:C3:B9:8A:AB:BC:F7
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584E6F3A4A6D798B409F28DEC2C0
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     397041
IP address blocks:        2604:f740:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4a:6d:79:8b:40:9f:28:de:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b2ce39f3-7e41-4918-a32d-805b0602441c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:e9:82:4e:45:0b:e0:67:1e:73:9c:ae:55:
                    d3:13:bf:f7:87:36:97:d6:e5:1a:a8:46:d2:8d:cd:
                    71:01:96:e9:2f:e4:a5:ab:9f:be:0c:6d:f8:c4:03:
                    29:e1:83:58:ea:07:e1:7c:3d:0a:96:a3:fd:19:c4:
                    7f:3b:d9:8b:66:e0:7b:a0:d7:e2:74:3a:01:23:eb:
                    60:7f:4c:82:d5:d9:6c:d6:8a:85:97:4c:7b:1b:b0:
                    95:2c:7a:d2:a8:7f:0a:df:98:c6:e0:e2:99:06:70:
                    1e:89:c4:c4:64:13:59:5e:fb:59:14:74:15:fe:cb:
                    ee:60:d3:73:cd:97:1d:76:3c:84:ad:47:85:5f:46:
                    e9:31:16:61:fe:63:4d:db:8a:8c:4a:bf:72:a9:f7:
                    c6:40:4e:5b:f7:1d:d1:7e:29:83:a9:86:7f:0d:11:
                    2d:cf:a3:9e:28:2e:21:1d:02:f5:20:10:5f:a5:0b:
                    53:83:00:15:cf:63:d9:66:17:08:84:95:35:14:85:
                    53:72:83:41:c3:8c:19:bc:d5:fa:8c:58:f1:d0:61:
                    6b:60:40:78:88:10:b1:31:d1:90:29:2b:ef:45:e4:
                    ea:a8:07:13:f2:1c:55:01:85:05:ad:c5:f1:f6:d2:
                    08:f7:90:61:02:9d:a4:10:6d:56:61:8a:c8:53:b8:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:B6:7C:E9:E5:98:D6:44:B4:EE:2E:52:88:C3:B9:8A:AB:BC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:46:bf:86:e2:d6:70:9a:10:0f:12:47:28:34:c8:e6:99:
         62:58:39:e7:1f:76:b2:ab:e9:82:cd:b9:20:4f:a8:43:cc:29:
         36:63:b4:fa:ff:04:81:2f:75:d3:d0:73:51:22:a0:a0:91:cd:
         5c:27:d9:22:34:e3:aa:f8:60:e1:82:a2:66:a8:8f:5d:d5:51:
         35:ba:66:fc:65:fb:4d:af:30:5d:ad:49:e2:e7:78:c9:12:16:
         46:f1:e8:e4:9b:17:02:20:0a:40:52:c0:01:1a:c1:cf:06:ff:
         7e:db:25:f6:5a:6e:10:fe:6e:ce:c6:25:18:24:7e:25:5d:b3:
         04:fe:09:06:5e:2f:68:41:2f:d7:7a:19:b5:3e:f6:fb:ac:e3:
         63:d0:cc:8c:be:a2:62:67:82:a4:d5:eb:5b:5e:34:f9:c1:b9:
         eb:26:09:48:37:c9:d5:0e:f2:d7:49:08:b9:c6:ea:4f:a0:81:
         7d:2d:4f:48:8a:01:52:9a:ce:2a:60:38:49:8c:bb:b6:38:a0:
         28:ce:1f:1b:5d:51:7f:a4:08:4f:53:10:f6:19:ae:70:c0:d3:
         af:f9:34:d2:cf:f5:09:a1:5f:ae:d4:29:49:54:a2:b7:e2:d0:
         75:75:02:c4:54:28:af:1d:7a:b9:ac:8e:b6:6a:0e:a6:e9:31:
         8f:86:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:15 2026 by rpki-client