Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa
File:                     a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa (raw, json)
Hash identifier:          /WTM2Yt2mNdxBIaCbH0fET+11k/I5FFwXXA5kI/Oofc=
Subject key identifier:   93:88:28:96:57:CF:4B:0B:34:0E:C5:98:58:27:70:D4:EB:04:FC:F8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D492A812196F0FC9666E91348
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     19527
IP address blocks:        2600:1902:b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:81:21:96:f0:fc:96:66:e9:13:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=9be8a4c7-b773-47ee-810e-03757846a4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:b2:54:33:e4:c8:fc:ac:c7:92:2f:2f:1e:
                    89:52:b9:3c:d8:ad:6d:09:6a:16:66:dc:0c:4a:0a:
                    4d:b4:25:36:c1:b2:4f:df:99:ac:c6:66:4a:58:8c:
                    e9:65:b0:a2:4a:68:5d:e0:52:52:03:3b:3c:7d:f4:
                    8b:d5:87:67:c8:c8:be:45:53:3b:13:2f:e4:1c:5f:
                    7b:d3:6e:57:ea:2d:61:41:3e:52:85:5f:7f:7a:0d:
                    5d:ab:11:e7:f4:39:b8:f1:73:80:56:81:ed:8c:d6:
                    42:b7:d7:44:14:20:ab:97:d2:45:d0:e4:29:3d:65:
                    91:00:cc:42:1f:1c:35:27:2b:15:e4:b0:e8:fe:b5:
                    12:14:50:6e:2e:f4:14:32:ce:e9:02:ec:66:c0:bd:
                    6a:9a:6a:a5:62:e8:cf:5a:08:ca:13:53:39:ce:ba:
                    7f:94:47:7a:c9:88:af:43:a3:cf:fe:e8:af:90:23:
                    2f:0d:ec:63:42:e0:f9:d5:05:a2:d0:f6:74:27:b8:
                    73:d6:43:b6:73:8a:75:fc:70:a9:c7:80:1c:bc:a3:
                    dc:ea:3f:f9:53:e6:ac:4c:80:b0:2f:86:0d:93:46:
                    2a:a4:8c:a5:51:62:a4:e2:9c:9f:38:d3:d9:83:83:
                    a4:00:b8:96:c5:b8:21:5a:7c:83:1a:f5:d4:c6:ac:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:28:96:57:CF:4B:0B:34:0E:C5:98:58:27:70:D4:EB:04:FC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:30:27:38:83:54:51:b5:db:29:9a:95:50:1b:a5:5d:49:17:
         39:c5:83:62:3d:3e:e2:84:5d:66:37:ca:5f:cb:58:48:fe:9d:
         f9:ac:d9:59:bb:05:f8:74:bc:78:df:36:1a:b9:e6:2d:97:db:
         77:83:b8:08:4a:bb:6a:93:84:68:7f:1f:0e:9a:d1:51:99:d6:
         26:be:66:29:3b:41:fd:0c:e7:7c:d2:5e:d3:c0:e0:8c:c7:a6:
         a2:57:1c:09:28:10:6e:5e:e8:83:68:0a:be:ff:a7:83:90:7e:
         73:7a:a4:24:bb:d9:c0:22:78:ab:62:85:32:f1:60:3e:40:7a:
         9e:22:7d:52:04:cd:27:19:50:0e:1a:55:65:51:29:cb:35:e8:
         63:c6:4f:73:9c:5e:64:5c:aa:d0:a9:8e:e2:22:bb:8a:2f:0d:
         9a:59:01:07:c5:d0:8c:0e:ce:05:e1:31:ca:96:93:81:f8:35:
         a7:5b:66:44:0c:aa:40:b3:b6:34:10:29:cb:ad:ce:7d:0b:37:
         83:af:f1:ad:77:11:52:5a:04:4b:dc:04:8b:ec:9b:97:6f:94:
         f8:c5:fc:c0:b9:a7:dd:84:76:1b:44:54:19:c4:b1:49:39:ca:
         52:b7:4f:15:75:8f:3e:7a:a0:7b:97:b0:87:e5:87:80:cc:4c:
         40:e6:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:48 2026 by rpki-client