Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21bceadc-22dd-355d-b68a-bb71d00b8033.roa
File:                     21bceadc-22dd-355d-b68a-bb71d00b8033.roa (raw, json)
Hash identifier:          w3js1WNDxYCulNB5HtVlUk1WM2Xnl8Ji7s1Ze3SsmDQ=
Subject key identifier:   20:76:33:E2:23:6C:E4:10:15:2F:91:28:F7:6E:51:0A:DC:88:46:E4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DBA3B1E9A407C4E590F514F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21bceadc-22dd-355d-b68a-bb71d00b8033.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     19527
IP address blocks:        2600:1902:3c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1e:9a:40:7c:4e:59:0f:51:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=da889745-ce2c-4b81-a4e7-e828cf5e816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:cc:e4:99:c1:cf:2f:5a:dd:b3:8b:25:3e:
                    47:92:57:9c:86:88:90:f9:3a:2a:8f:34:3b:fc:ed:
                    e8:2f:25:92:74:1d:17:84:ea:90:b7:02:6a:6f:f6:
                    28:19:40:86:f2:e8:16:85:6c:87:de:79:28:e7:02:
                    c7:19:45:38:c1:5e:e0:0e:0c:55:c8:29:c6:72:b3:
                    c4:68:40:11:c4:ac:ea:1e:9c:69:f1:e2:a0:a2:fa:
                    3d:a3:27:ed:ad:28:83:a1:3e:57:b0:2e:d4:da:09:
                    16:4e:54:b0:32:d9:ba:da:4f:d9:58:7f:9b:a4:e5:
                    a6:83:c8:e5:ba:fd:94:5f:e3:2c:a5:3a:d7:8b:17:
                    4e:43:e3:28:dd:b6:87:8d:a8:9c:52:64:e6:70:3d:
                    08:78:c5:75:d3:d2:15:a5:02:73:1d:c2:9c:be:de:
                    31:c3:92:29:a7:03:ec:6c:54:e9:b0:25:49:30:38:
                    c5:07:e0:2e:e4:64:7e:3f:3e:31:08:54:d3:c5:de:
                    c3:19:a4:4f:72:47:e1:60:42:44:54:e2:9b:b3:85:
                    31:8c:2f:99:b2:67:a5:be:a8:23:e0:9b:eb:62:be:
                    e6:61:c9:e1:16:fa:7f:6a:66:4d:72:8a:78:08:c4:
                    4b:81:f4:64:b7:93:86:f2:a8:33:66:53:8f:1d:62:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:33:E2:23:6C:E4:10:15:2F:91:28:F7:6E:51:0A:DC:88:46:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21bceadc-22dd-355d-b68a-bb71d00b8033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:3c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:b8:bd:a2:78:05:c5:68:59:65:77:bf:3f:0b:2d:cb:98:
         7a:d1:c9:77:d3:fe:13:17:4e:b4:9d:18:cc:46:84:b4:37:af:
         18:d1:97:0a:f7:8a:56:3d:65:9a:76:5e:da:9f:29:a6:3d:42:
         81:b2:e9:69:31:49:1f:6b:ec:8f:03:84:d2:85:e6:e5:58:f3:
         25:89:13:91:59:27:6f:9c:88:aa:5f:5e:f3:da:09:b4:4e:b6:
         53:99:9f:00:38:0a:52:f0:aa:b9:be:5f:4c:de:de:d1:96:96:
         f2:93:5f:c4:13:57:8b:69:4e:55:8b:0e:13:cf:51:30:cb:2e:
         f6:ec:a3:32:ce:e7:92:d3:a9:24:15:c0:b1:e4:01:20:30:ed:
         e7:6f:08:85:2a:59:75:ea:96:25:47:3c:6b:bf:99:04:ba:4b:
         73:6f:b2:38:6c:be:90:5c:85:02:34:9b:a7:72:33:a7:b7:30:
         2d:af:24:a3:97:78:58:b7:c9:20:e9:60:63:a9:ac:b9:0c:11:
         08:bd:b9:b8:d2:2b:e6:b3:b6:ea:b2:e0:35:b7:be:43:f8:cf:
         23:2c:a0:c3:89:99:1f:bb:ce:36:89:d6:f2:09:a2:35:9e:32:
         6a:30:ff:84:a2:cd:c0:d3:86:af:aa:24:45:8f:f3:4a:1b:14:
         eb:a9:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:55 2026 by rpki-client