Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab45f921-5f9f-3d2d-850c-188189dec1b9.roa
File:                     ab45f921-5f9f-3d2d-850c-188189dec1b9.roa (raw, json)
Hash identifier:          FXNEIYAjGpjRaTTGASR6kKF3IHEMGWLrQy0l0Aab87w=
Subject key identifier:   CF:25:12:97:7B:72:39:09:60:B3:C2:8D:D2:3A:A3:E7:DD:CA:AA:9E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E90BA548B24587F51F3061200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab45f921-5f9f-3d2d-850c-188189dec1b9.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     396982
IP address blocks:        2600:1904:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:54:8b:24:58:7f:51:f3:06:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=e61777e1-90c7-45ad-bbbf-8e0d49350c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:60:c7:cf:ea:74:c8:7b:be:46:f6:9b:91:
                    9c:9d:b3:3c:97:db:e5:2f:14:1a:96:0b:64:55:08:
                    d4:9b:e7:27:8a:06:5e:e0:bd:23:27:b1:04:43:fb:
                    5e:88:5b:92:97:b3:52:51:dc:9c:ac:ae:07:7a:81:
                    15:64:68:99:aa:84:61:7d:cf:32:da:68:54:eb:dc:
                    3d:85:b4:96:86:de:56:93:a3:1c:39:56:e1:96:d9:
                    69:7e:34:42:e5:f5:02:00:f7:78:db:17:3c:a4:31:
                    da:41:04:d4:23:eb:8b:23:a5:a2:be:01:66:2c:4b:
                    be:8d:68:54:22:f5:44:42:c2:e3:58:90:02:7b:71:
                    61:89:43:c6:9d:23:08:91:5a:ae:b3:27:9b:0a:9d:
                    fc:96:d1:fe:ca:46:16:c1:b5:f4:40:97:27:fc:0b:
                    e8:43:27:1b:54:e4:47:84:d7:c2:b5:93:27:24:3e:
                    00:35:be:dd:fa:2f:11:a5:35:a0:7d:7f:94:d3:11:
                    83:6f:57:29:4a:88:c1:38:e9:62:dd:56:87:50:47:
                    6a:a1:bb:0d:d3:1c:05:1c:f6:6e:51:1a:f3:f2:de:
                    94:a0:38:72:2f:22:7c:28:01:03:a7:12:bf:45:e6:
                    54:91:07:8e:0a:73:61:66:52:dd:79:f3:8b:fb:ef:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:25:12:97:7B:72:39:09:60:B3:C2:8D:D2:3A:A3:E7:DD:CA:AA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab45f921-5f9f-3d2d-850c-188189dec1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1904:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2f:8a:50:0d:6d:08:0b:36:eb:49:c0:bb:3f:c1:f8:49:fc:
         81:65:8a:d3:ea:2a:6b:8c:c8:85:0a:0a:3c:ca:2e:37:cc:d0:
         e1:67:dc:bd:7f:6b:19:04:bc:d0:a6:95:20:c7:c8:fe:94:7a:
         76:3f:25:09:98:a5:6c:76:c4:0d:c1:b7:52:ed:a3:cc:98:c1:
         22:9f:69:95:3b:1f:5f:e9:de:7c:b4:0e:77:3e:aa:e3:ad:4e:
         1e:74:d5:d3:b3:ca:ec:f1:77:ee:f4:eb:c9:4b:a0:78:78:6a:
         95:82:9b:d0:54:09:bc:d4:30:12:5d:af:84:1b:d3:37:fa:33:
         9f:5e:f3:60:19:48:36:67:31:2b:bb:d8:ba:b2:ad:45:0c:dc:
         06:0e:85:c8:22:57:e4:15:11:a9:3c:e4:06:35:2d:c6:0a:5b:
         01:7a:8a:cd:07:4c:5c:12:51:96:fe:04:3d:bd:05:1a:26:38:
         21:7f:c1:6a:9d:24:3d:b3:a7:02:fb:3b:98:20:cb:25:bb:ab:
         d1:72:66:cd:f2:c4:0e:df:0b:14:97:17:2f:dc:51:15:30:bb:
         11:a6:72:37:dd:11:82:9c:d2:28:d4:4c:43:e8:ea:9e:57:c7:
         47:0a:cb:0e:6a:26:c1:36:15:59:50:e1:43:e0:dd:92:79:01:
         18:1b:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:24:49 2026 by rpki-client