Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74c9e534-58bd-301d-a739-57d821c80a0b.roa
File:                     74c9e534-58bd-301d-a739-57d821c80a0b.roa (raw, json)
Hash identifier:          HpG+keR2ZUglR0f1nhWssUEIdlTyT0vfrUMqZIDhkNc=
Subject key identifier:   86:D8:05:08:69:69:2E:1A:50:87:C0:FB:10:91:8D:43:E7:1B:DC:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB99EA753767BEB802EA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74c9e534-58bd-301d-a739-57d821c80a0b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     40264
IP address blocks:        2602:107:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:99:ea:75:37:67:be:b8:02:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d1b0a48a-ba5e-4e32-a98f-fcd9ffb88930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:2e:f7:0b:11:73:9a:d9:49:15:79:c1:f9:
                    2f:8d:ee:b7:c8:6a:9a:bf:15:df:42:07:07:2c:d9:
                    55:16:c8:22:91:b6:ca:4a:8b:d3:ef:07:7a:d0:55:
                    f0:82:9b:55:a0:d8:d9:2a:ff:b4:3e:74:15:43:eb:
                    46:9c:48:bc:78:05:79:7e:46:0d:b8:ae:b9:74:a6:
                    75:72:ad:1f:19:7d:54:c9:9c:e9:af:d7:21:05:84:
                    3c:13:f3:1b:da:4a:80:a2:67:e4:6c:86:19:10:1f:
                    47:41:7d:b8:1a:07:51:d6:cb:03:3e:6a:cb:3d:68:
                    57:12:ea:c8:a6:06:f9:d3:f6:88:e2:4f:7b:48:68:
                    61:09:5c:96:a3:f8:40:5b:f5:fc:73:07:c6:b0:aa:
                    65:4d:b1:39:ca:db:40:49:f9:18:1e:2b:c9:0f:1b:
                    07:7e:71:22:31:e3:1f:97:8d:07:a0:bf:b1:2d:d7:
                    f5:ac:b3:cd:f3:f4:a4:43:62:67:84:15:6a:88:d7:
                    9c:a8:bb:d1:8b:d6:a9:4d:ee:4d:4f:b4:4d:1a:38:
                    68:79:21:93:d0:3e:5f:e0:62:cd:80:84:26:df:b9:
                    ea:98:96:7d:d8:1a:69:9c:fb:97:56:5a:0f:9f:df:
                    6c:73:4d:9c:6b:4c:7c:a1:22:c2:69:7e:17:29:74:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:05:08:69:69:2E:1A:50:87:C0:FB:10:91:8D:43:E7:1B:DC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74c9e534-58bd-301d-a739-57d821c80a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:fe:89:d2:68:4b:7f:59:8d:5f:63:5b:fc:0e:cc:58:38:
         21:2c:c3:92:3e:c1:74:b4:d7:db:0b:23:d3:a2:a8:02:93:c1:
         d1:f9:fd:19:30:7e:1a:e7:3e:08:b5:d8:b6:af:70:94:d3:13:
         2d:99:80:8c:af:19:93:01:81:85:9f:14:f0:17:eb:20:ef:26:
         ff:c8:06:2f:17:3c:9a:bc:33:37:61:c3:40:68:a5:f8:d2:be:
         b0:53:53:67:3a:d4:f0:5f:d1:85:eb:35:1b:e3:e0:fd:0a:ab:
         86:ba:8a:93:e3:54:83:16:07:af:f1:a1:1d:19:72:b6:a5:08:
         0e:4f:f7:a8:c3:bd:fd:5a:b8:e0:9a:e6:0f:4a:62:1c:a1:2e:
         be:8b:14:c1:23:3b:ea:02:e3:5a:8a:2b:09:d3:c9:bd:10:df:
         17:e3:17:e1:54:e8:d8:9d:12:24:72:01:44:f0:30:08:32:86:
         c2:6f:f0:27:df:c8:38:f5:9f:60:a2:d6:de:25:76:46:8f:4e:
         9f:ab:cd:c6:12:62:84:39:33:17:6f:16:36:a7:e5:03:6c:e6:
         e6:a8:7c:ea:a6:29:fc:77:32:60:5c:b7:6b:5e:46:29:ec:4d:
         17:1b:e3:b6:c3:4b:b6:b3:8a:24:a1:74:29:14:cc:0e:a5:79:
         78:3c:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:52 2026 by rpki-client