Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b4ad10e-a4b5-3ed8-acf4-3dee97f0e360.roa
File:                     0b4ad10e-a4b5-3ed8-acf4-3dee97f0e360.roa (raw, json)
Hash identifier:          +DZghBi4LsZp1Bw/RMiwo7SYl9OVZ11RKKLmHxGGmco=
Subject key identifier:   DF:0A:DB:DA:8D:E1:63:0D:23:EF:15:42:7A:85:6B:2C:30:97:3B:56
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DBA3B1F3C5FCCEAFD8E00E280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b4ad10e-a4b5-3ed8-acf4-3dee97f0e360.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     19527
IP address blocks:        2600:1902:350::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1f:3c:5f:cc:ea:fd:8e:00:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=4bad387f-7041-4ed0-b51e-83189b09ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:54:ab:a6:50:3b:50:1a:f7:2b:c3:f7:4d:
                    db:0d:4f:8d:85:53:c8:8e:a8:41:ec:64:c8:19:ae:
                    dc:48:13:4e:6b:c5:2f:42:64:ab:99:55:fe:62:69:
                    55:94:a9:01:05:dd:5a:2a:bc:9c:8c:b1:88:af:c3:
                    94:e9:0f:95:b8:e2:82:ea:18:04:1d:e4:45:c9:33:
                    6b:80:94:dc:07:d3:55:7a:37:9e:2d:1b:f6:21:77:
                    b3:ac:d8:8a:67:c6:5d:49:fc:0d:a1:53:be:12:18:
                    c3:02:df:08:f5:ad:07:48:4a:dc:2d:dd:5d:5e:b2:
                    36:5b:b5:fd:5e:9f:a3:13:90:f4:71:01:2c:80:8b:
                    b4:77:85:03:fb:8a:a7:18:4d:8d:e8:68:b6:fd:c6:
                    38:e4:f7:09:47:df:64:31:78:27:9d:bf:e8:1a:a5:
                    01:31:21:9c:ce:3e:8d:22:23:ad:8c:04:ea:c7:b4:
                    66:10:0c:6a:16:74:ae:65:be:1b:06:2c:a1:4f:34:
                    95:b8:0c:50:88:ea:9a:3b:89:d4:80:01:ea:2a:32:
                    ff:7a:d8:3e:28:c9:98:c6:c9:4f:a8:fa:9a:99:93:
                    eb:5f:3d:d5:fa:3e:9f:ef:4b:80:8e:76:48:20:ca:
                    3f:cb:00:c6:d6:1e:57:2a:4d:c8:d7:2a:9a:4b:7b:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0A:DB:DA:8D:E1:63:0D:23:EF:15:42:7A:85:6B:2C:30:97:3B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b4ad10e-a4b5-3ed8-acf4-3dee97f0e360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:350::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:e4:83:67:80:3a:9e:33:9b:f9:63:fd:23:48:fe:0b:4b:
         25:a0:af:3e:87:b0:4e:0b:7c:4f:79:7a:83:c0:7b:bb:02:19:
         d6:ce:aa:04:18:6c:ea:56:78:4b:09:1c:63:97:d3:20:95:1d:
         ea:d7:05:c0:90:b3:ee:fb:4e:d1:ce:92:3f:a4:00:9a:b4:33:
         4e:c7:b2:3f:1a:24:c2:a1:51:f9:6f:83:30:98:93:eb:1a:26:
         a7:1d:b4:79:d6:1d:57:fd:4b:00:36:0a:25:83:5c:74:1e:59:
         d0:33:bb:32:c3:26:c4:6c:a0:6a:d0:17:fa:55:21:03:d0:6e:
         61:fa:e5:8e:d7:bc:71:84:e3:47:a9:90:e3:2d:91:d2:03:0e:
         db:a1:54:e1:c1:59:ec:6d:39:51:80:0f:e0:cf:cf:2e:03:d2:
         62:c2:21:bb:23:0a:cc:8a:fc:4e:d2:e5:31:ee:59:af:12:d9:
         3e:dc:24:c9:5a:cd:2e:fc:06:10:d3:74:94:be:f5:99:88:62:
         da:20:fd:4d:27:2a:c6:fe:c4:89:57:f1:5b:1f:55:fe:fa:e0:
         76:6d:20:6d:80:09:f1:98:40:22:e5:4f:c5:22:8f:32:8b:c4:
         a3:97:a3:d4:03:3f:a8:73:3b:f1:35:23:51:38:f6:78:1b:a9:
         27:b5:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:28 2026 by rpki-client