Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa
File:                     d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa (raw, json)
Hash identifier:          TZxaUTuJJaUAxe7zuiUTXeF6ljxS0yYFHRBGFmpLXMc=
Subject key identifier:   F5:E8:90:F7:AE:0F:3D:1F:04:EF:E6:69:84:CD:EA:86:6F:E4:30:29
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DBBA070CFD75C10DC8D0C00C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     15169
IP address blocks:        2600:1902:560::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:70:cf:d7:5c:10:dc:8d:0c:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a2dde806-30a9-40e5-9408-91fa32f6fee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:d7:83:82:36:03:37:53:36:38:ba:af:38:
                    e0:b1:7e:7c:9d:6a:f1:f5:4c:42:aa:ec:0c:0c:4d:
                    50:be:91:e9:18:0e:c7:77:83:37:45:43:37:7d:24:
                    56:c3:23:e1:5d:e9:60:67:14:0d:cb:dc:ed:a5:b3:
                    59:33:2c:de:e9:ed:5c:20:46:a1:21:4d:6d:bc:6e:
                    fa:b3:7e:77:a3:3b:76:9f:97:2f:23:7b:57:f5:3b:
                    5c:3c:6b:4a:28:77:c8:37:58:39:7c:36:a5:ac:8a:
                    9f:6e:c1:3b:69:31:2a:5d:8f:0f:ae:b0:5d:e1:ed:
                    29:2d:8f:8d:c6:69:22:8b:52:cc:6d:ae:87:a4:05:
                    ad:03:35:6a:cc:4a:d3:1c:df:15:aa:a8:9a:7f:b1:
                    d3:78:94:72:72:1a:95:56:59:0d:49:36:eb:cd:b3:
                    5e:b5:91:b3:9b:b8:09:6c:b0:b9:29:35:3b:19:d3:
                    19:46:a1:86:a0:f6:b0:9e:9b:cf:ee:a3:49:93:eb:
                    15:0c:bb:f9:95:c8:df:84:b9:24:9e:a3:0d:32:0a:
                    2b:03:f0:88:1b:0c:85:60:d2:44:e5:02:14:dc:b6:
                    c3:dc:f3:e0:c8:c2:03:58:58:46:85:36:a3:c3:08:
                    1f:2b:db:95:52:29:19:10:01:8f:d9:7e:64:89:fc:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:90:F7:AE:0F:3D:1F:04:EF:E6:69:84:CD:EA:86:6F:E4:30:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:560::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:44:ac:e4:fa:75:8d:9b:8f:4c:c0:e5:98:af:91:27:f9:51:
         09:77:4b:c7:8e:e7:dc:d2:d8:9c:6b:e2:3c:34:61:04:12:9a:
         ad:ea:cb:2b:07:86:b0:85:ae:28:38:e2:97:ee:5f:ff:d6:ff:
         a3:83:ec:d7:0c:6c:d3:aa:f1:cd:25:15:4b:a9:a4:f8:dc:9d:
         67:4f:56:a4:d0:2e:93:58:76:db:09:53:15:fd:51:a9:de:c9:
         b2:52:ae:54:fa:41:6d:44:a8:c5:4d:d2:b0:4d:05:ae:af:48:
         02:49:6f:23:f4:5c:36:38:f3:69:48:93:d2:c9:74:04:80:8a:
         46:51:c0:6c:82:fa:76:57:86:43:59:47:9c:65:d4:24:c7:ec:
         42:41:cc:b4:1e:1c:fb:11:13:2d:d6:33:fd:cf:da:71:13:b1:
         34:07:7e:ff:d1:42:64:6b:e3:45:6a:56:39:45:12:fd:49:41:
         7c:38:f4:5a:da:bf:e1:2a:e8:82:d0:bb:62:18:6a:52:43:71:
         1a:87:3d:e1:91:a9:ae:e6:d6:10:c3:1c:5a:e2:bc:be:ec:8b:
         ed:28:0e:4b:d7:a0:93:cd:97:ee:38:07:e7:26:78:49:58:85:
         ba:b0:2e:58:ee:f0:8e:e7:33:5c:76:c6:69:41:2e:d9:41:e6:
         e3:ee:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:43 2026 by rpki-client