Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9e56be1-142f-3232-81de-5a42719d96e4.roa
File:                     a9e56be1-142f-3232-81de-5a42719d96e4.roa (raw, json)
Hash identifier:          tt98lfLpJL17yfqdMVD2oNh/nkX2Yvv0KVLQ0CRX2iI=
Subject key identifier:   8C:A3:0C:2C:10:A4:AE:D7:EA:F8:E1:8D:7B:C1:C7:CA:CA:7C:5B:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA7E777D715EF26A4B8660
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9e56be1-142f-3232-81de-5a42719d96e4.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11351
IP address blocks:        2600:6000:fd83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:7e:77:7d:71:5e:f2:6a:4b:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=20f6c1e8-5d94-4fb0-9d61-c135e6e62491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:a5:90:66:ac:6e:eb:34:94:c9:ec:c2:7d:
                    22:2b:4f:0e:bc:a0:2c:9e:a5:2d:c7:26:ac:0c:72:
                    dd:0b:e9:c9:fb:ab:69:23:8b:89:3a:c1:a1:d2:3e:
                    9b:1e:0d:f9:a0:61:58:f3:8d:a4:06:bd:80:d8:4f:
                    e2:7a:d8:cd:3d:20:6b:44:20:b9:cd:36:12:ca:d8:
                    1a:ae:74:0c:f8:41:2d:d7:15:67:13:4c:23:6a:62:
                    6c:46:2a:0a:14:8c:b8:64:08:97:65:99:c4:28:ac:
                    d6:fb:a4:5a:21:ee:79:3b:30:c9:01:02:8d:2f:5b:
                    0e:fb:36:0e:3e:7b:57:6d:99:f7:21:09:c7:33:4c:
                    a9:e4:3d:2b:05:53:5f:7b:97:3a:ee:40:46:ac:75:
                    60:78:5d:68:04:2d:1c:cd:bc:c3:9d:8a:a7:3d:cc:
                    10:5c:49:87:1b:bf:1b:4e:72:2b:0e:4c:53:dc:71:
                    ed:04:05:66:b2:b8:b4:c6:37:98:87:ab:8b:3d:89:
                    37:e3:c4:ad:75:b0:20:12:fa:d0:b9:fb:68:be:b0:
                    7d:d5:ae:0c:f1:4c:24:0f:7f:2c:4d:ae:0b:8f:47:
                    f6:f6:f6:e1:00:5f:44:dd:26:07:f6:9f:03:f7:6e:
                    f3:30:14:04:57:b4:eb:ec:40:5b:c0:8e:6a:e3:a3:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:0C:2C:10:A4:AE:D7:EA:F8:E1:8D:7B:C1:C7:CA:CA:7C:5B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9e56be1-142f-3232-81de-5a42719d96e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fd83::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:b2:1b:5a:92:eb:32:f5:68:37:63:09:b4:19:72:44:e8:
         8c:c6:c3:50:67:e3:15:c2:42:e7:3c:12:94:4d:40:8b:28:55:
         f1:03:b5:a6:2d:4e:ec:7c:5e:7e:c4:5f:4a:e0:8b:ec:a7:94:
         7d:02:14:41:f9:63:85:26:38:91:88:60:05:a7:0b:1c:27:a0:
         b5:d2:33:fe:3f:65:d5:9c:7e:61:c2:e6:50:33:8f:b3:95:b5:
         89:8b:43:f1:6d:a5:b3:ec:51:e6:72:a7:d3:c5:e8:c1:53:4f:
         f2:64:4b:d7:bd:5a:70:26:e7:0d:95:31:99:95:ff:68:bc:0e:
         db:f8:68:72:40:4a:d8:20:ff:38:3e:01:23:81:11:36:b9:a7:
         ca:e6:0c:fa:1c:63:3c:ae:9a:7b:c8:36:2f:65:e5:0b:15:e2:
         60:56:41:03:da:d4:2c:16:77:53:58:f5:10:07:fc:a9:5e:95:
         ef:8d:28:63:38:48:6e:d8:03:ef:8b:2e:12:06:bc:4b:33:02:
         15:33:fb:e4:07:1f:eb:6b:77:31:3b:ed:10:69:e3:8c:c2:d3:
         eb:e2:c4:0d:b5:95:e0:3a:42:ee:61:98:11:75:db:71:06:79:
         b7:b5:fe:59:a7:fb:ab:b4:ea:c4:f2:08:ee:14:48:1e:5b:69:
         3e:48:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:39 2026 by rpki-client