Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa
File:                     01243c49-b15c-3c10-9b0b-65476f595fe6.roa (raw, json)
Hash identifier:          lp/2G5dndYjlFEkkBWKylflHx4Yi3LG6gA5LxYWFzME=
Subject key identifier:   AC:53:5C:F7:C7:4F:81:F8:5A:71:33:05:87:41:C6:CF:B1:53:99:94
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF902E38751655BB26080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20231
IP address blocks:        2602:107:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f9:02:e3:87:51:65:5b:b2:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b73582ec-fe1a-482e-8595-974d03fd143c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:ff:57:3e:19:2e:29:f8:e2:88:df:5e:55:
                    30:eb:b4:66:3e:b0:15:72:ee:af:b9:79:15:88:21:
                    54:d6:b8:60:7b:d4:65:21:46:5e:02:49:7c:8b:bf:
                    be:c2:90:4f:91:20:7f:fb:66:a9:a2:d6:4f:02:e5:
                    7f:f3:e4:7a:63:d6:5b:e6:31:e7:37:cf:ae:3a:66:
                    06:c1:f0:77:b5:73:b2:1a:56:d6:16:ed:48:2f:c5:
                    70:eb:db:f4:25:20:98:5a:68:b4:90:d4:0e:3b:1f:
                    ed:0b:98:c8:70:0b:d2:a3:16:99:14:c2:72:9e:45:
                    3d:e0:1b:46:d4:f0:be:23:97:2d:8e:fc:99:6d:60:
                    d0:d6:1f:4e:39:3c:c7:91:38:c4:f4:91:fa:6b:e1:
                    46:32:9e:8b:ab:e9:c1:63:14:5a:73:a3:b3:e8:00:
                    19:f8:c4:cf:fd:12:62:ea:31:7a:a3:02:c8:18:14:
                    c9:dd:0f:63:ff:e0:62:f2:8a:5f:51:6c:94:1b:c2:
                    f4:15:66:65:44:2c:54:06:32:0a:a5:c6:4e:e9:cf:
                    c5:a5:04:dc:1e:c5:ba:02:f1:ec:95:0b:fa:67:6b:
                    3d:aa:5e:2b:f7:1c:0f:7a:d2:57:77:a5:64:e7:33:
                    17:e9:08:2c:8f:c9:ae:c0:59:51:fc:25:61:3e:82:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:53:5C:F7:C7:4F:81:F8:5A:71:33:05:87:41:C6:CF:B1:53:99:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01243c49-b15c-3c10-9b0b-65476f595fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cc:7d:d1:81:d4:c2:a7:39:e0:42:e0:73:9d:35:8a:8d:04:
         1b:aa:68:32:66:d5:86:09:ce:2d:65:76:36:72:48:70:40:0e:
         aa:ab:f1:b5:73:9a:e4:e9:0b:ba:be:22:f6:ce:6f:d0:84:41:
         c9:8e:09:3b:41:68:3b:5f:75:e8:7c:45:3f:02:ff:34:2f:19:
         1e:66:05:39:91:e3:29:fa:29:f5:2f:12:cd:d2:18:69:ba:0a:
         8c:a0:c3:d1:7c:65:1d:43:23:84:38:7c:c0:7f:12:fb:64:07:
         d5:c8:12:80:fe:ca:d5:c8:ff:56:8a:61:51:ea:e1:85:d1:0a:
         01:0b:d7:91:e4:1a:58:7b:49:50:a1:6e:3b:19:cc:5f:a1:6f:
         c4:3a:2e:1b:6d:1f:c5:56:71:e1:af:f9:1c:a3:7d:75:b8:ae:
         80:b4:ab:66:8f:f0:d7:12:76:06:98:fc:a1:1a:48:c1:9d:9c:
         a0:29:52:60:7e:7d:21:67:88:b2:93:b3:50:31:cb:37:00:5d:
         60:b6:29:eb:b7:9f:be:be:da:6f:59:8d:7d:da:aa:f7:52:76:
         ec:50:d9:5f:62:ae:b1:6f:69:2f:c6:0d:5a:76:14:6c:c9:0e:
         25:c8:6f:93:dc:bf:76:39:ab:a8:41:17:b4:52:9b:8f:da:bc:
         5d:34:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:23 2026 by rpki-client