Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6de8a585-5cc6-35d6-a5eb-0b6a23828ef9.roa
File:                     6de8a585-5cc6-35d6-a5eb-0b6a23828ef9.roa (raw, json)
Hash identifier:          PaaLGEktEuz1MyemNUEjbcHRq7uD1ExNk3XN5hNLuSM=
Subject key identifier:   BD:AF:23:9D:B1:83:CD:B6:B3:AD:B5:16:9F:CB:69:BC:79:A2:47:76
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D492A4EED7CAD468E48F2B700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6de8a585-5cc6-35d6-a5eb-0b6a23828ef9.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     19527
IP address blocks:        2600:1902:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:4e:ed:7c:ad:46:8e:48:f2:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=41c6b499-da80-478b-b9fb-4022e47fef98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:ec:53:00:3c:48:51:98:ca:e1:65:bc:e0:
                    59:5a:30:ad:8b:cf:f7:56:96:ab:06:89:85:39:1f:
                    38:bb:23:4d:d5:22:87:db:78:e5:f4:e2:20:b5:32:
                    3b:99:61:e7:8d:5a:44:18:36:59:94:d0:da:89:dc:
                    e3:7a:b8:fa:7d:b2:e4:26:a9:88:e8:01:4b:0c:a8:
                    9d:68:d9:d2:72:a8:f5:4e:35:cc:c5:3d:c5:39:52:
                    3f:94:5b:89:a7:3d:16:06:63:4e:05:a7:9c:65:93:
                    e7:8c:73:f5:55:c4:0c:16:16:c3:0a:81:53:36:43:
                    bd:32:80:a1:c0:7f:a7:3f:bb:ef:1a:2c:35:d6:80:
                    99:60:30:bb:54:51:9d:9a:e0:61:62:9e:57:45:ff:
                    94:36:b3:c2:d1:70:cd:bb:e0:48:79:7c:c4:ed:c5:
                    16:84:94:df:c7:b7:bd:12:57:ea:c3:be:f2:11:77:
                    77:c7:c7:bb:fe:24:9d:e4:c7:b1:26:e3:49:ab:b6:
                    08:e2:54:dd:fa:df:02:ea:de:78:d6:be:16:b3:a3:
                    f6:fa:a2:59:89:03:48:f7:3e:30:8f:88:50:28:95:
                    42:5a:34:e4:ed:75:b4:25:80:cf:fa:54:0b:96:e8:
                    e8:8e:a9:a5:96:64:5c:6a:dd:27:c5:9f:50:2b:67:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AF:23:9D:B1:83:CD:B6:B3:AD:B5:16:9F:CB:69:BC:79:A2:47:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6de8a585-5cc6-35d6-a5eb-0b6a23828ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:3b:69:80:24:a7:d8:a7:60:5c:b2:51:93:b0:07:b3:2c:
         41:8a:f8:b7:82:1c:f0:f3:a7:f2:26:ba:b5:55:e6:e9:e1:2e:
         73:5a:73:22:68:d7:93:83:72:a5:ab:d5:7d:c7:fe:35:63:11:
         df:c1:8a:69:37:f3:4a:28:b3:a5:a8:50:64:6c:30:60:87:83:
         b6:90:41:3c:3d:61:e7:dd:f8:e5:13:8c:fc:e8:20:bf:15:9f:
         af:17:e2:81:6f:08:22:a0:5a:0d:8a:9c:0d:0e:d2:1a:6e:74:
         5e:53:b4:75:87:ae:91:b5:61:51:28:ef:ee:d5:57:45:fb:30:
         b3:fb:a3:6e:80:70:ee:c3:45:97:43:65:65:00:f9:b3:9f:22:
         a1:48:52:07:e8:b0:13:dd:77:6b:dd:bb:07:23:c0:bb:40:e9:
         73:0d:33:81:2e:a8:86:7e:6e:ae:95:11:8a:a9:37:d7:2f:09:
         9d:75:fd:3e:02:c9:c4:d6:36:2d:7e:55:6f:98:c5:78:bf:2c:
         0d:c8:83:79:fd:f2:12:75:42:5c:2a:23:87:74:f9:70:8b:08:
         e8:68:b5:af:22:0f:4d:cd:86:e1:98:55:79:2d:89:3f:15:d3:
         75:10:77:dd:de:ed:fc:fb:fa:99:5f:a5:b8:9a:ba:5c:42:44:
         7c:30:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:16 2026 by rpki-client