Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b8d9a45b-7678-3bfa-830b-c5692670015b.roa
File:                     b8d9a45b-7678-3bfa-830b-c5692670015b.roa (raw, json)
Hash identifier:          gMaog/OLO7/9sX1XnKk8uLVka8TOBrWxVkC7WzHjddE=
Subject key identifier:   F2:94:C5:E5:FA:73:99:D2:ED:C5:C8:19:BF:F3:6B:5A:29:FE:8F:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E90BA47C4A8833A7DB5787780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b8d9a45b-7678-3bfa-830b-c5692670015b.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     0
IP address blocks:        2602:100::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:47:c4:a8:83:3a:7d:b5:78:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1e4f32d2-e9ee-4c8f-91e5-9732b634e00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:6d:3f:e1:e4:c7:5f:c3:ce:77:9d:4c:d6:
                    7d:e8:84:79:6f:15:bd:ea:f5:f4:5d:ae:56:e6:fe:
                    ea:98:bb:e3:5e:52:6e:76:2f:2f:cc:fa:96:a2:88:
                    98:3d:e9:4b:01:f2:3c:19:4d:6e:a5:97:6f:e8:50:
                    4d:22:ba:cb:1a:35:78:0f:28:5b:ed:6e:03:34:92:
                    4e:d7:0a:5b:2c:4f:67:5d:30:ab:7c:d9:6a:52:e2:
                    d9:da:a0:a1:0a:2f:20:71:47:62:a7:99:c9:47:ac:
                    a5:36:2d:e8:02:94:3c:89:3d:ff:56:c4:f3:b6:0d:
                    7e:89:31:e2:05:28:63:72:3f:89:cb:28:b5:fd:8e:
                    3d:d0:c4:33:40:76:68:76:55:7c:6c:0a:bb:a7:af:
                    68:a7:39:5a:4c:86:c3:a7:ac:d8:d5:7d:05:72:dc:
                    e3:1d:f6:02:73:8e:96:d7:c5:2f:c5:27:ed:d0:50:
                    48:c0:69:5d:89:be:1a:c1:6e:d4:cf:fc:68:a6:d0:
                    ef:6a:f5:f5:10:d8:52:ef:6c:07:8c:b3:b9:38:77:
                    6c:08:2c:14:4c:3c:f2:d5:9f:2c:d3:70:d3:82:cf:
                    be:dd:d3:dc:5c:73:81:ca:1d:cd:b6:46:af:92:0b:
                    f4:cb:e9:f9:3f:32:a4:b5:e8:4c:90:c5:3e:d2:93:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:94:C5:E5:FA:73:99:D2:ED:C5:C8:19:BF:F3:6B:5A:29:FE:8F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b8d9a45b-7678-3bfa-830b-c5692670015b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:0a:a1:80:3e:f9:35:6f:35:c4:f9:0c:22:77:45:bf:dc:b1:
         37:c6:23:a5:80:29:c4:b8:b5:28:86:e8:14:1e:24:06:de:d7:
         90:07:a3:61:98:58:e3:59:e1:a3:35:78:03:fc:64:76:be:00:
         18:7d:ab:2d:6e:43:87:41:ef:06:e2:73:9f:67:0e:46:8a:84:
         ed:2d:1b:6d:23:9e:e0:c2:16:84:ee:4d:83:d5:0d:77:d9:fb:
         fb:15:6d:3a:34:88:81:1c:f5:d4:45:f5:21:71:b8:b4:7b:58:
         55:66:f9:d8:50:c2:bd:75:b3:54:f2:e5:db:58:f4:7a:d6:80:
         07:da:81:18:cd:77:f7:74:44:12:e1:9d:ac:5f:8c:71:78:03:
         cf:87:85:98:11:20:38:e3:93:e2:f6:93:bf:68:c1:37:93:5f:
         99:29:da:a2:2b:96:25:19:e9:2b:be:49:64:57:1e:7a:6f:4c:
         c4:01:31:45:41:95:01:fa:2f:dd:2d:8a:e7:67:86:0a:d3:25:
         37:01:1c:b6:33:8b:9a:38:4b:96:a6:df:57:e6:3f:94:8d:3c:
         2e:22:f7:5c:bb:ed:39:a0:12:25:26:83:27:20:08:9f:90:ff:
         fe:9a:64:c9:50:86:c6:06:52:47:13:4b:13:e7:10:82:46:ca:
         4c:72:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:13 2026 by rpki-client