Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c428a587-ad0b-3e1d-ba8c-171af6cd3dfc.roa
File:                     c428a587-ad0b-3e1d-ba8c-171af6cd3dfc.roa (raw, json)
Hash identifier:          wWRrNQ66EGOD+aVFaGAP6zdL+j+9jMwZtT27cs2xjXk=
Subject key identifier:   09:5A:04:13:62:F7:09:38:59:19:71:51:63:27:BE:E2:AB:86:5E:C8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D492A49A461CFE6A75E9E0900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c428a587-ad0b-3e1d-ba8c-171af6cd3dfc.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     19527
IP address blocks:        2600:1902:2b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:49:a4:61:cf:e6:a7:5e:9e:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=f677b82a-9fba-4322-849f-3486e98dbf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:43:71:31:60:44:c4:b6:77:10:b0:f0:d2:
                    89:af:9c:66:07:4a:0d:b9:18:48:cd:3a:3f:aa:ac:
                    94:e4:c2:33:38:f2:be:58:c5:12:b6:13:3e:a7:b9:
                    88:02:a9:49:26:19:b0:f3:c9:30:28:e1:a3:df:ae:
                    b6:dc:a2:49:4c:2f:3f:0a:7f:42:9d:1f:09:37:bb:
                    1a:ea:41:81:73:42:74:12:ce:25:49:5f:5f:52:87:
                    28:80:d7:6f:02:5a:54:4c:a7:3f:a9:ad:65:b8:2e:
                    64:ac:47:78:07:58:f4:14:ab:8a:28:b9:06:c4:02:
                    8e:98:63:f1:fb:ca:94:19:c8:c5:e0:14:33:40:8b:
                    42:90:8d:91:10:d6:d6:52:8b:df:9d:4b:6a:72:8f:
                    5d:f6:e7:d4:e8:3d:64:a8:a7:f8:fc:b5:eb:8a:54:
                    14:04:3b:8b:f7:8a:91:b7:7a:10:79:a4:86:a4:f1:
                    7d:18:37:8c:98:f3:a2:67:f7:51:78:b1:f3:27:34:
                    fb:64:e2:38:e6:da:1f:64:06:fa:cc:15:55:ef:f4:
                    b0:6e:a1:96:d2:00:34:77:e8:71:90:ac:9e:3a:b9:
                    01:44:d1:fa:f7:c5:1b:97:49:c7:39:f4:90:73:c6:
                    be:d6:c6:20:9f:06:19:1a:7b:12:ba:21:69:37:69:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:04:13:62:F7:09:38:59:19:71:51:63:27:BE:E2:AB:86:5E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c428a587-ad0b-3e1d-ba8c-171af6cd3dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:2b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:30:59:0e:7a:f9:ce:cd:af:e6:62:23:8e:3a:48:6d:bb:69:
         a8:ba:ef:d2:fb:81:f1:73:07:bb:e4:9c:ed:d1:bf:56:c5:74:
         a8:c6:e1:c5:c2:77:d2:f8:7a:a4:0f:19:56:31:d2:bf:9b:5a:
         9f:e1:75:17:a4:0c:aa:5f:22:98:a0:67:1f:55:33:3c:ef:1c:
         46:ed:f0:2f:6a:ee:ec:0a:73:92:ce:f1:84:74:48:bd:7f:9e:
         d2:e3:c2:9e:5f:c2:05:ae:a0:1c:78:69:10:b8:21:84:d5:07:
         64:95:ce:ad:1b:4c:06:95:c9:fd:0e:15:19:e0:d6:1a:48:33:
         e2:5f:b2:0f:1b:eb:e4:c6:07:d2:be:89:0d:45:67:da:8a:ff:
         da:16:90:c6:0d:25:97:67:cb:77:85:01:2a:d2:f9:dc:da:fd:
         0f:06:ec:ee:05:e7:8b:2c:2e:0e:59:7f:24:81:1f:1d:2b:4e:
         d8:a6:b3:70:0a:f8:0f:06:c6:83:b2:74:c0:09:f9:52:d4:c9:
         85:9d:9d:99:dd:94:95:30:c7:7d:03:a4:a4:3b:95:01:33:10:
         02:1c:a6:9e:83:fd:d4:f6:ae:88:6f:85:31:07:33:a1:61:7a:
         9f:07:db:a9:3a:b8:0b:a4:d5:05:a1:11:65:7c:06:5b:0f:d0:
         9e:bb:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:32 2026 by rpki-client