Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2440caa8-e1f4-3335-8284-a7c874b297f9.roa
File:                     2440caa8-e1f4-3335-8284-a7c874b297f9.roa (raw, json)
Hash identifier:          oF3B7/Kz+nQHj27bdHB/DrltqqpJB6zynBdZnrhCGaE=
Subject key identifier:   40:F9:3C:68:83:A7:FE:D8:B1:7F:6F:42:3F:5D:AF:40:F1:4F:AD:BA
Certificate issuer:       /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial:       010D0C9F4328584E90BA5F5D4B1DB8CD1AC82700
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2440caa8-e1f4-3335-8284-a7c874b297f9.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     397423
IP address blocks:        2604:2820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5f:5d:4b:1d:b8:cd:1a:c8:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1b0df92b-6d4c-47fe-8ef3-6390cd1e429f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:83:4b:bd:85:a6:8b:b8:12:ea:2b:e8:50:
                    ae:7e:21:df:ff:ee:57:1f:b7:38:64:9d:17:6a:27:
                    41:ab:fe:88:63:45:11:a0:49:87:03:b2:b2:85:4a:
                    cc:d0:7d:44:58:33:22:2a:b1:14:c4:bd:df:f9:a0:
                    8f:7e:0c:b4:7d:f3:31:a3:8b:f8:4e:9d:52:46:88:
                    00:3d:95:a7:25:f8:5f:ba:60:f1:3f:61:bf:14:52:
                    16:05:1f:54:71:b7:a7:49:d3:72:02:18:55:92:0f:
                    be:7f:02:e5:99:de:b8:70:af:66:86:98:d4:4b:fe:
                    3a:e4:b7:cb:60:5d:24:08:d6:9a:97:07:48:ad:1e:
                    87:9c:87:d7:07:cb:5d:dd:57:20:e8:2b:68:f6:1f:
                    69:9d:b4:52:92:fc:71:29:ac:c6:c6:9b:5d:bd:7f:
                    89:f2:39:5e:f3:12:6e:18:40:03:1c:33:d4:cd:11:
                    55:35:cf:a7:0f:bd:34:4e:3a:00:ae:9c:10:1b:3f:
                    d9:9a:05:cb:7b:31:95:b9:4e:4b:c5:96:a3:71:05:
                    c8:47:4c:24:de:e1:d7:ef:c0:cf:7f:ec:4d:1f:fa:
                    a0:24:e3:6a:be:41:ed:e0:19:cf:5b:e8:16:99:f7:
                    ef:b0:e9:4b:07:ea:54:d5:a5:9e:59:ae:4c:bf:b3:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F9:3C:68:83:A7:FE:D8:B1:7F:6F:42:3F:5D:AF:40:F1:4F:AD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/2440caa8-e1f4-3335-8284-a7c874b297f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl

            X509v3 Authority Key Identifier:
                keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:04:24:af:fc:90:6e:17:90:8a:2f:28:90:d4:04:16:03:cc:
         20:e4:eb:8b:60:0a:54:97:c2:d0:23:b9:91:83:e6:e3:5d:a7:
         1c:27:2a:5e:4d:81:1b:82:07:24:50:a7:68:37:f9:99:f8:50:
         50:63:8f:39:dc:dc:46:4d:1e:02:77:77:fc:8f:ba:8e:66:44:
         9c:39:82:e8:61:9e:66:cc:36:26:bd:fd:b6:a9:41:b9:1a:aa:
         db:f4:82:53:b6:57:ee:1d:6b:95:da:22:c8:17:d0:9d:0c:bb:
         87:0e:e3:62:e1:b7:dc:ef:6a:41:cd:f4:d9:4b:51:16:da:8b:
         76:24:90:bc:36:67:10:68:5c:a9:4e:16:80:1c:94:25:a3:05:
         b5:a6:95:25:84:82:11:10:7a:b0:03:f4:42:01:1d:83:c4:d3:
         90:99:c8:23:22:c3:1c:95:de:d8:03:ed:08:45:5b:5c:8e:e4:
         bb:2e:f3:15:83:17:64:ac:bd:77:28:62:3f:7b:27:f5:18:1a:
         8c:5b:4a:cf:e1:e3:ec:5b:15:66:a6:33:94:7f:02:e0:eb:c3:
         ec:4a:33:6a:2a:52:1a:e9:66:31:c2:ee:a9:0c:46:58:65:03:
         6a:03:fd:86:53:41:48:70:0e:73:c0:99:91:28:c9:e7:84:27:
         d7:2a:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:47 2026 by rpki-client