Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3db4d8d2-25a4-3327-acb7-441f0ec084be.roa
File:                     3db4d8d2-25a4-3327-acb7-441f0ec084be.roa (raw, json)
Hash identifier:          XWwGrcTM2reVwVJochfSrFh071hoPUC10kFK+cGDInM=
Subject key identifier:   60:BD:65:51:07:1E:1A:9A:21:46:7C:2B:39:3F:02:CC:51:D8:F0:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF60E54EC7254DE5221F7640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3db4d8d2-25a4-3327-acb7-441f0ec084be.roa
Signing time:             Tue 12 May 2026 14:49:08 +0000
ROA not before:           Tue 12 May 2026 14:49:08 +0000
ROA not after:            Mon 10 Aug 2026 14:49:08 +0000
asID:                     43515
IP address blocks:        2600:1902:4c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:60:e5:4e:c7:25:4d:e5:22:1f:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:49:08 2026 GMT
            Not After : Aug 10 14:49:08 2026 GMT
        Subject: CN=11953333-9c80-4955-ad9b-04026952cfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:e9:9c:a3:f0:65:43:99:50:d6:00:1c:51:
                    06:e1:12:ee:87:f5:a3:d8:6b:3f:33:52:f1:ef:ed:
                    9b:60:ab:e6:6a:86:a2:1c:e0:fb:8e:06:3d:b1:0e:
                    ca:f2:f6:ea:55:5a:b0:bf:6e:1d:d6:f7:15:68:f8:
                    de:ad:3d:2e:6d:42:be:13:85:d7:56:ea:6a:65:68:
                    e5:d4:f9:a4:91:4e:4e:f4:dd:c1:51:eb:8a:a8:f9:
                    68:e1:e9:72:84:54:6d:67:52:50:dd:52:fb:0a:f4:
                    d1:38:4b:46:c1:13:99:67:31:b3:79:b6:08:9c:89:
                    9a:b3:26:9e:2c:07:2e:ba:ba:e7:94:19:f6:1a:ab:
                    e9:68:b1:7d:ab:dd:20:be:8f:bf:eb:f4:06:31:4c:
                    81:05:e2:83:8c:73:ae:1a:af:06:05:17:f0:7f:ca:
                    a9:44:ea:60:75:75:d2:15:40:61:b4:59:fb:0d:a8:
                    58:02:bc:49:36:31:53:f4:e2:1f:64:a7:40:e7:56:
                    eb:54:ff:9d:80:b7:21:27:6a:33:bb:d3:73:23:6e:
                    97:38:45:3e:96:45:20:54:2f:0f:98:f2:db:d8:f0:
                    f8:67:7a:4d:0c:dc:65:01:35:cd:89:36:5e:04:ba:
                    7e:fb:de:44:c3:d4:eb:bb:c5:0f:05:5c:d3:a3:69:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:65:51:07:1E:1A:9A:21:46:7C:2B:39:3F:02:CC:51:D8:F0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3db4d8d2-25a4-3327-acb7-441f0ec084be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:4c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:13:62:64:dc:39:d9:5b:ef:d9:8f:12:e8:7a:7c:78:04:ad:
         46:b8:d0:f0:a1:f1:7c:81:33:0e:c3:40:ea:5e:35:79:d4:22:
         eb:f4:d1:6b:96:ca:09:53:2d:f9:a8:6c:9d:87:95:b3:68:59:
         3f:30:1e:7b:b8:bc:4c:e3:2b:98:c2:f5:6d:58:12:5e:11:d6:
         76:e2:f5:20:7a:c1:a2:c8:23:72:cd:e2:6b:cc:ad:90:08:49:
         9c:31:86:b5:67:f0:3a:23:95:01:d1:de:4f:4d:37:65:42:fc:
         c3:a3:77:5d:67:ac:0f:86:15:58:de:62:ff:b2:0f:2a:62:92:
         0f:3d:e5:39:18:6d:56:7a:58:19:91:7f:ac:ff:9c:3f:c9:b6:
         57:9b:3b:8b:8b:1e:2f:f0:e4:0c:0b:3b:91:44:e3:68:5c:2b:
         49:32:45:65:54:ab:2f:49:63:97:29:36:dd:06:52:d6:e7:59:
         40:e5:66:95:24:88:3d:65:79:d1:44:ac:84:df:18:73:d4:27:
         e1:32:99:83:f8:2a:05:3e:62:08:8e:59:3d:94:c3:67:cd:ef:
         d4:20:3e:8c:2b:41:30:2f:82:21:c6:c1:1d:47:d8:b0:b2:19:
         49:95:c6:23:b7:4e:5a:80:b8:19:8d:a5:f1:08:d5:54:47:11:
         ba:c1:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:37 2026 by rpki-client