Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa
File:                     f4caae64-8955-3f41-a393-ad49b0d16894.roa (raw, json)
Hash identifier:          keNCckm2KHB5Bdhfemip1pL9yCzXMB9QW5+EtKdaP+o=
Subject key identifier:   98:FD:E7:19:E1:DA:49:86:77:0B:6A:B8:81:8E:8B:BB:94:41:5E:7A
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584E858F8F041E2228D2FBBB3900
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     397041
IP address blocks:        2604:f740:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:8f:04:1e:22:28:d2:fb:bb:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=e794a017-4877-4f01-a3f6-624208af9b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:6a:3f:37:6c:8c:11:db:ef:13:f3:d0:04:
                    83:13:27:a9:55:1a:c2:d0:08:86:8e:f9:7c:18:12:
                    00:9f:17:83:5f:f9:07:32:33:db:b0:c1:1e:f1:ad:
                    fa:b2:b7:4d:6e:e4:73:da:39:73:fa:bc:b9:a4:d3:
                    55:86:05:57:e4:fa:7d:4d:ff:0c:72:0b:04:75:a0:
                    5d:fa:6e:6e:78:16:50:d6:4f:ca:b0:4f:f4:8b:05:
                    02:e9:80:96:41:70:bb:77:ed:08:70:71:f7:8b:4c:
                    62:3f:25:4f:a5:a4:8c:95:32:cb:5e:81:51:65:f7:
                    c6:dc:81:ab:5f:fa:65:19:c1:e0:54:f2:ef:71:5f:
                    ec:70:7b:9b:51:d9:7f:f9:da:c7:f7:54:56:f5:d5:
                    f2:1d:2b:00:fa:40:7c:fb:5a:9c:3e:5c:b0:ec:9e:
                    2f:27:23:ec:60:45:6d:1f:8e:7c:c6:b4:a7:92:6c:
                    40:4c:6e:d6:3c:ce:05:a9:86:6d:c8:1c:e1:88:f3:
                    89:94:71:67:a4:4d:28:12:3d:70:51:39:b6:a0:c7:
                    22:23:fa:8e:82:bd:23:bb:8f:f1:92:f6:83:da:4c:
                    23:d8:56:fc:33:73:1f:3a:6f:c1:d2:f5:57:e6:be:
                    e0:e8:6a:07:0e:6f:ce:d4:17:eb:00:04:e4:41:a0:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FD:E7:19:E1:DA:49:86:77:0B:6A:B8:81:8E:8B:BB:94:41:5E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/f4caae64-8955-3f41-a393-ad49b0d16894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:13:02:2b:aa:75:45:f1:b7:5c:a3:c3:e7:85:3a:77:da:76:
         63:ce:4b:d4:91:4e:44:cc:20:7d:28:59:f3:80:46:31:3c:19:
         e8:7c:c2:10:44:cc:cc:aa:0e:f0:75:bf:f6:1a:a9:e4:55:1f:
         af:3a:bc:50:98:2a:9b:fb:a3:fd:38:0f:c2:49:9c:47:3c:9d:
         32:d2:4e:95:c2:16:76:5d:75:37:1f:a1:40:38:31:10:b9:2b:
         d8:ff:b8:7c:ee:4e:90:c6:49:ad:47:24:26:19:9d:a6:f2:ae:
         f5:88:9a:26:20:57:65:7d:e5:2a:79:a8:17:d0:d3:70:6e:ec:
         1a:e3:4f:44:d5:54:02:a5:f5:0e:14:3d:b7:87:1d:9a:fb:c3:
         b3:f5:6b:93:ac:23:07:4d:71:8b:33:ed:e4:a5:5d:a2:3f:75:
         e5:7a:5a:4e:f5:1d:91:00:1c:3e:d7:b2:2e:11:62:83:b4:a6:
         87:43:c3:72:23:b6:b5:71:d6:0a:9d:64:c8:bd:f8:6f:0a:9d:
         a9:88:1a:c2:9c:53:cf:a7:24:fc:76:95:04:3b:02:fa:c9:85:
         8d:c0:ae:23:10:1c:e2:b2:5e:cc:9f:9d:c3:9e:2b:39:fe:cd:
         13:f1:9c:d8:95:c9:52:e9:4b:cc:f9:74:35:a4:4f:78:46:eb:
         2a:57:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:13 2026 by rpki-client