Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab3096d-e00a-3e3c-a827-a3880637a1fa.roa
File:                     aab3096d-e00a-3e3c-a827-a3880637a1fa.roa (raw, json)
Hash identifier:          ljxFrhfXnZrKNJRy2Z7eJlCOEDK49nR3WZvHunmIJwo=
Subject key identifier:   7E:F3:22:E3:BE:4B:46:31:AC:78:DC:A6:EC:DF:8F:66:34:7C:43:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF63D4D6724B47DCA8509740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab3096d-e00a-3e3c-a827-a3880637a1fa.roa
Signing time:             Tue 12 May 2026 14:55:03 +0000
ROA not before:           Tue 12 May 2026 14:55:03 +0000
ROA not after:            Mon 10 Aug 2026 14:55:03 +0000
asID:                     43515
IP address blocks:        2600:1902:430::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:63:d4:d6:72:4b:47:dc:a8:50:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:55:03 2026 GMT
            Not After : Aug 10 14:55:03 2026 GMT
        Subject: CN=3a535547-c9be-4f8a-9a02-a790b3c23b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:ab:f3:4c:15:e3:fb:fe:f2:a6:0f:c0:3c:
                    92:4a:ae:e4:7c:e4:2e:8a:55:f1:29:f5:5e:68:4c:
                    90:bf:a0:c9:4a:2d:ba:b1:34:c4:e7:d4:af:4e:76:
                    3f:70:0c:25:c3:03:f9:37:80:19:cf:48:0b:30:ac:
                    a2:92:91:68:5e:63:06:2a:a8:dd:d6:c3:e5:5b:4e:
                    e3:00:f6:50:f9:e0:1a:bc:c1:8d:58:65:af:f3:5b:
                    38:83:e8:3b:69:fe:d6:ee:e4:f2:ec:2c:a3:b8:21:
                    5a:88:02:3f:bf:8b:33:d1:64:96:92:55:fd:a4:62:
                    e9:9e:70:41:ca:e8:5d:59:b8:b7:84:29:41:2a:b2:
                    51:9b:56:27:79:2b:5c:ba:e1:b7:ab:f3:fb:a7:af:
                    9b:b3:a0:3b:65:8d:2a:b9:5e:93:7a:ac:4e:19:bf:
                    3d:70:fc:51:ab:54:7b:99:22:06:b6:d9:0f:a7:aa:
                    2a:f6:94:f7:aa:cc:50:89:fa:c5:87:33:09:7d:70:
                    d7:1d:d9:fb:0a:80:8a:88:da:1e:32:e2:fd:ed:dc:
                    ad:d0:7e:fd:38:ca:b9:09:a1:77:2d:11:f8:dc:a8:
                    0a:49:b5:fd:96:16:dc:f6:af:71:1f:b7:48:72:be:
                    e2:d3:dd:a0:65:cc:e1:32:53:d8:cd:13:ec:59:23:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F3:22:E3:BE:4B:46:31:AC:78:DC:A6:EC:DF:8F:66:34:7C:43:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab3096d-e00a-3e3c-a827-a3880637a1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:af:93:62:89:d4:bc:e6:3c:e5:e5:b8:3a:53:78:3a:3d:f9:
         81:15:49:f5:1a:c4:29:d2:c6:a5:5c:01:42:fa:74:54:25:7e:
         c0:04:b5:64:c7:93:17:3d:5d:15:41:f1:f3:b5:81:29:8f:43:
         1a:67:a9:41:a8:28:2a:c8:1c:b4:f8:6e:11:b8:8d:70:48:56:
         dd:fc:ca:04:51:67:78:5e:4f:81:08:3f:f9:a5:f6:71:38:66:
         00:0c:1d:47:c2:47:69:61:f6:3c:da:c5:a8:5b:c3:5f:61:9b:
         6f:50:f9:65:25:ad:a1:4f:56:d0:55:df:9d:1b:ca:fc:33:68:
         6b:59:31:16:96:e6:bc:e2:72:b9:1b:53:d7:45:65:90:e0:cd:
         4b:0c:d9:95:10:4a:da:46:93:f3:b5:06:7e:a0:11:ab:f4:61:
         7c:d8:ca:47:f9:69:7d:6d:31:d3:18:37:ae:c6:83:55:a9:f4:
         94:6a:d4:ea:90:d3:9b:a8:46:ad:ba:05:9b:d3:da:d5:6e:61:
         5f:99:3a:76:24:0c:76:5d:5f:04:d3:24:ca:39:df:bd:71:00:
         65:2f:e9:2f:a8:4e:da:51:51:6c:15:68:cd:19:e5:6d:7c:ce:
         53:36:34:f4:57:07:99:fc:e0:07:8f:a5:18:20:5e:84:2d:38:
         2b:0a:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:55 2026 by rpki-client