Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400e8a61-3563-3531-892c-2fff41f6709e.roa
File:                     400e8a61-3563-3531-892c-2fff41f6709e.roa (raw, json)
Hash identifier:          AOQNFcQ6FPg+6bfC9xXgz74ApAIh5wxLiGO+0WAZ2W8=
Subject key identifier:   6B:82:BD:31:02:B1:F6:9B:E2:B4:AD:CA:3F:C5:72:89:EA:6A:01:50
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5F20744DDA6E983805BF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400e8a61-3563-3531-892c-2fff41f6709e.roa
Signing time:             Tue 12 May 2026 14:45:34 +0000
ROA not before:           Tue 12 May 2026 14:45:34 +0000
ROA not after:            Mon 10 Aug 2026 14:45:34 +0000
asID:                     43515
IP address blocks:        2600:1902:5a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5f:20:74:4d:da:6e:98:38:05:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:45:34 2026 GMT
            Not After : Aug 10 14:45:34 2026 GMT
        Subject: CN=bdfbc7bb-58bf-47c7-8a91-3f8bb852b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:08:f2:6d:72:06:8a:df:89:9a:cc:5d:09:
                    ec:d4:43:1a:7e:d3:3e:10:c8:6a:4e:66:0d:7f:b7:
                    95:90:01:90:86:af:0b:31:fe:8a:04:6b:c4:35:fa:
                    ef:51:45:7c:96:63:4b:80:a8:a7:bf:1d:91:a4:60:
                    bf:dc:37:43:7a:87:95:89:fb:a3:6c:ae:38:ce:50:
                    e0:be:71:7e:a4:37:9e:31:07:00:df:c8:da:ac:6f:
                    ee:9c:99:ca:d8:ed:07:bd:42:06:3f:b8:12:c4:4f:
                    25:8a:79:62:ab:cb:06:42:45:89:77:cd:b4:28:17:
                    3f:c9:77:a9:67:ff:7a:c4:80:21:65:4f:dd:eb:8d:
                    83:81:30:f2:45:85:9b:5b:53:11:1b:f6:3f:99:e0:
                    99:e9:ae:be:6c:6f:d2:04:c0:ca:c7:36:fa:d6:3e:
                    38:0f:02:ca:f8:34:2f:ea:0e:ce:ef:cb:43:00:34:
                    8d:2e:b5:96:c9:4a:94:c2:da:3a:ee:88:38:65:b6:
                    49:ca:f4:23:80:ed:57:28:bd:c6:51:12:5d:4f:d0:
                    23:cd:d5:89:c9:70:e8:33:6d:6d:d5:a1:b3:63:2e:
                    89:cb:86:1d:3b:c9:df:a9:4d:25:46:6c:c0:5c:43:
                    3a:5e:d1:d0:b5:66:f5:26:68:5e:6d:22:c6:8d:9e:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:82:BD:31:02:B1:F6:9B:E2:B4:AD:CA:3F:C5:72:89:EA:6A:01:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400e8a61-3563-3531-892c-2fff41f6709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:5a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:64:3d:ee:2a:8e:a3:59:65:99:62:eb:c7:c8:d9:4e:67:8e:
         34:02:67:13:fc:d2:d5:bc:95:94:38:25:bf:f0:bd:77:1b:e5:
         68:87:26:5a:ec:42:6a:56:da:af:6b:60:03:4a:25:9a:e0:de:
         ef:7e:e2:3e:f3:fb:a4:0f:3b:a0:66:e0:1d:88:4e:92:d5:e3:
         34:4c:4e:2f:ab:48:5c:c7:e9:a8:16:94:8f:2a:95:c4:87:21:
         41:ac:e4:a6:eb:65:2e:4e:70:bd:cb:ee:17:5d:c2:0c:7f:a5:
         10:31:a7:f0:fa:75:38:b3:46:8a:b6:12:09:e5:a2:86:54:f6:
         58:4a:6a:27:20:e6:90:85:a0:85:fe:da:e3:43:cf:3a:e7:5d:
         3b:02:cb:06:ef:fc:50:c0:de:1f:84:29:eb:55:a7:76:72:10:
         e9:3e:33:e0:03:91:ef:81:46:39:8d:bb:97:39:07:df:ff:f8:
         a7:c9:ea:57:f5:85:6c:9c:61:3a:1b:9b:3b:08:a3:e9:81:8f:
         78:ed:1b:a5:7b:e1:2c:99:8f:3d:5c:81:0d:85:28:d9:61:8f:
         e7:9f:1b:14:57:e9:60:82:f9:8c:d8:c0:18:0f:a8:22:a2:cb:
         62:12:82:a7:28:38:8c:8a:9d:6f:f8:53:10:29:ae:a0:23:30:
         4c:31:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:53 2026 by rpki-client