Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c84dbfa-7fe9-3c05-995d-d5d248ccf380.roa
File:                     8c84dbfa-7fe9-3c05-995d-d5d248ccf380.roa (raw, json)
Hash identifier:          XfmZ7prDLy9jh8iwBZJTK6dRnHbYjpPdHBsQ2HgHOoU=
Subject key identifier:   03:87:20:64:AB:12:C3:94:46:11:2D:98:5A:FE:6A:A0:66:1B:F3:AA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1E881C226DDAD82202380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c84dbfa-7fe9-3c05-995d-d5d248ccf380.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:180::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e8:81:c2:26:dd:ad:82:20:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=ff60b9e0-a0be-45c6-8d48-10db62bda9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:ef:ff:13:a4:ba:ed:d6:1f:f9:6d:8a:c1:
                    e7:46:ad:d7:fb:3c:2d:a1:fa:e9:f6:ac:6c:00:5a:
                    2e:84:83:5a:5a:8c:7b:86:2e:2a:d7:c6:32:cd:fd:
                    79:13:65:32:99:78:0e:2f:56:7f:9b:0d:68:fd:8f:
                    f4:16:40:b5:a9:37:08:27:aa:b8:87:42:31:d6:56:
                    cd:34:ff:39:f0:71:27:7d:cc:6c:7a:43:77:de:a8:
                    82:7d:64:54:66:52:73:78:a8:21:a8:28:58:0e:84:
                    16:ee:55:7b:08:c3:c1:7c:3c:11:8f:dd:38:24:0f:
                    0b:2d:ad:53:c6:cb:57:a3:66:33:4c:d4:7c:95:91:
                    c1:36:8d:66:df:ee:33:7c:3e:90:e3:12:40:82:85:
                    9f:7d:48:9f:0e:dc:07:ee:18:9c:be:3a:ea:8a:af:
                    ac:b9:da:e5:bd:6e:57:52:5f:d8:90:5f:b3:cd:86:
                    d8:ae:eb:82:1e:7b:ab:72:5e:40:14:52:b1:7a:e0:
                    57:c9:66:cb:41:52:c6:26:77:8c:61:a0:aa:25:86:
                    c3:dc:91:a0:da:d1:dd:d8:26:09:3a:0b:18:2f:e8:
                    0c:11:79:fb:c0:15:0d:e8:e9:e0:35:23:2b:7f:d9:
                    d5:63:fd:e6:4a:b1:e9:9d:8a:e1:17:88:d6:08:95:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:87:20:64:AB:12:C3:94:46:11:2D:98:5A:FE:6A:A0:66:1B:F3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c84dbfa-7fe9-3c05-995d-d5d248ccf380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:34:ae:f8:95:3a:ce:22:9b:60:ed:f1:9f:37:cd:e7:95:
         08:02:51:40:b0:c6:ea:89:c9:91:8b:49:33:55:1b:2c:f3:93:
         b9:5a:03:82:10:61:4a:d6:f7:02:09:ff:bb:57:48:1e:a1:a4:
         bd:54:a1:1a:b3:25:3a:a0:d7:34:fd:6d:c9:fe:07:98:16:9f:
         8e:0a:26:ce:34:22:5f:14:da:2f:a0:85:c8:75:c2:7f:1e:70:
         02:71:3a:a5:71:74:4b:bf:0f:e2:9f:3f:e1:19:18:c6:c2:43:
         04:68:2a:4d:66:3d:4f:71:49:8e:18:b8:f6:dc:bb:f4:61:32:
         5e:54:71:f0:ae:3f:22:77:cf:7d:a5:09:6c:9f:12:53:09:aa:
         e9:4b:62:ea:b7:df:0c:05:b0:22:9e:13:ee:f5:b2:6c:54:41:
         91:9a:99:12:57:c8:90:25:45:35:0f:d4:42:2e:f5:1b:4c:d3:
         2d:59:f4:1e:92:cd:99:f1:26:51:db:98:24:3a:15:fb:48:2d:
         80:8e:ba:92:b7:29:89:e5:9b:9a:c0:91:b1:18:29:b4:dd:71:
         2e:53:7e:21:ab:8e:89:c1:17:59:ef:df:7e:dc:06:70:54:bc:
         c3:ae:24:7d:31:8e:ae:44:e7:38:3e:bf:04:ca:78:d9:8e:c1:
         35:0a:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:27:34 2026 by rpki-client