Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd697ab1-c118-355e-a617-81945fe4ec3f.roa
File:                     cd697ab1-c118-355e-a617-81945fe4ec3f.roa (raw, json)
Hash identifier:          xJEko/+EcmgJzuRd7WxH2ktTAw/VUgbhwCOF3HKnVmE=
Subject key identifier:   A4:9F:08:1D:88:9C:6B:41:EF:5F:6A:41:80:D7:C1:78:D9:45:86:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF63DCA641DFA11FC9EC7840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd697ab1-c118-355e-a617-81945fe4ec3f.roa
Signing time:             Tue 12 May 2026 14:55:07 +0000
ROA not before:           Tue 12 May 2026 14:55:07 +0000
ROA not after:            Mon 10 Aug 2026 14:55:07 +0000
asID:                     396982
IP address blocks:        2600:1902:560::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:63:dc:a6:41:df:a1:1f:c9:ec:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:55:07 2026 GMT
            Not After : Aug 10 14:55:07 2026 GMT
        Subject: CN=c0db887f-7004-4400-ac2a-d86ef095cbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:eb:1d:6f:d4:64:8f:82:53:14:53:d2:b6:
                    ef:45:69:e7:24:fe:d3:f7:49:b6:b8:25:b7:80:e6:
                    9f:f9:ad:47:1a:be:33:23:76:f4:44:a5:38:70:22:
                    b8:d3:ff:82:e6:7f:cc:03:0a:fb:94:b9:dd:b0:f7:
                    f6:51:0b:fb:aa:29:57:69:f0:ab:82:f4:11:85:e2:
                    e6:eb:c0:aa:cc:74:59:8d:d7:5f:7b:12:2b:19:ab:
                    dc:b0:c3:11:12:88:67:cc:4d:13:63:cf:dd:e4:70:
                    60:8e:5d:3d:13:ce:d7:83:b5:ef:63:c4:dd:70:e1:
                    de:85:54:fc:30:d8:11:bc:24:a4:d8:59:cf:56:8f:
                    06:85:73:50:2b:40:49:cd:fe:7d:47:3d:a2:59:54:
                    ca:9b:e0:47:96:3f:50:c5:37:ab:9d:7b:09:de:e1:
                    e4:47:6f:02:d3:03:61:96:b4:1a:33:bf:4e:e3:bc:
                    a2:ff:4c:74:ab:88:09:1c:27:ba:55:e2:15:23:7b:
                    bb:b1:73:8e:62:31:6b:68:71:72:5a:25:3d:f2:8e:
                    db:47:d3:42:b3:1d:18:85:8a:b9:6e:cd:10:73:6c:
                    c8:d1:fb:29:4b:f6:26:27:17:9e:88:73:d9:94:34:
                    6e:08:87:50:b7:23:11:bb:d8:a1:b0:bb:2a:d8:a5:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:08:1D:88:9C:6B:41:EF:5F:6A:41:80:D7:C1:78:D9:45:86:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd697ab1-c118-355e-a617-81945fe4ec3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:560::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:9c:1d:f5:3b:7d:30:a0:2e:a5:99:47:51:b8:51:e0:7f:
         d9:57:7f:c7:3f:14:cf:24:88:6f:f3:28:5f:c4:4a:1c:81:9c:
         5e:11:4c:10:3f:af:01:45:f1:2b:d4:f8:a9:63:50:ae:68:a9:
         53:1f:88:86:b6:d8:c9:c2:59:93:8d:48:e4:e9:a1:6e:d0:90:
         93:e4:f2:b7:16:1f:9a:dc:eb:73:dc:03:49:17:d5:48:af:18:
         70:11:c4:fd:67:2d:91:ce:70:53:ea:5f:b8:88:16:25:54:bc:
         24:2e:d6:e5:78:84:0a:7c:81:8d:36:15:77:ea:7b:45:1b:b1:
         32:82:4e:0f:93:63:be:3e:4e:0f:dc:11:05:ca:65:ba:eb:67:
         2d:4b:f4:08:8d:37:27:2c:8e:44:11:a1:58:2e:75:ee:57:21:
         d3:73:12:fc:33:c1:ac:05:04:86:76:12:62:87:53:e5:55:62:
         9e:d0:d8:78:41:60:bd:47:5e:b3:e5:23:6f:4c:c5:97:59:64:
         b4:d7:49:2c:8a:b0:0b:05:3b:23:56:8f:da:3b:76:69:39:b3:
         b7:3c:b7:48:fa:5d:65:1c:75:ed:fa:95:2d:90:ee:c3:92:04:
         9e:b7:a5:69:ba:4c:24:ad:1b:ea:75:e7:de:64:56:ca:0c:8d:
         32:61:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:22 2026 by rpki-client