Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9f7a29e-441b-3f72-978c-3f206a7b49be.roa
File:                     e9f7a29e-441b-3f72-978c-3f206a7b49be.roa (raw, json)
Hash identifier:          afNSwwpuyKs7JhVrHBVI3WagI1YPOik+X7uZ0J2T2Xg=
Subject key identifier:   32:6A:C0:07:B3:B9:24:70:2C:A9:00:03:C8:08:AE:CA:0E:41:44:F9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF6262B74E451B0DCF49ECC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9f7a29e-441b-3f72-978c-3f206a7b49be.roa
Signing time:             Tue 12 May 2026 14:52:08 +0000
ROA not before:           Tue 12 May 2026 14:52:08 +0000
ROA not after:            Mon 10 Aug 2026 14:52:08 +0000
asID:                     43515
IP address blocks:        2600:1902:190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:62:62:b7:4e:45:1b:0d:cf:49:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:52:08 2026 GMT
            Not After : Aug 10 14:52:08 2026 GMT
        Subject: CN=f2af44e4-ad07-46ec-9463-5991d94536d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:9d:22:11:07:31:5d:d8:5e:3c:d7:50:66:
                    77:fd:08:d9:e9:15:11:71:71:b7:d1:f6:e2:72:40:
                    47:46:ba:70:7c:9f:97:11:e1:a1:c4:f2:21:e2:d3:
                    69:57:72:5d:43:37:b9:ff:f7:85:26:5a:79:14:30:
                    ba:b4:6a:ea:61:71:d6:4d:49:3a:46:8b:b4:a1:9e:
                    c4:65:a0:ea:b9:67:dd:da:c3:d4:d6:25:21:3d:80:
                    fc:4d:7f:c2:f8:9e:3a:4f:fe:a7:43:4d:89:66:0f:
                    23:73:17:d0:db:4c:c4:79:62:b6:9b:5a:db:0b:21:
                    0b:b2:c9:60:3e:1c:c9:0a:aa:84:ae:ff:2f:87:83:
                    56:5f:68:8f:af:6f:53:a4:5e:f2:7f:70:77:87:ba:
                    cf:7e:73:49:85:64:c8:46:5d:c5:4d:16:33:72:65:
                    f0:6c:7a:b6:7b:6e:fc:bf:c1:00:ab:47:d6:2c:fe:
                    e8:75:5a:8d:90:98:9d:94:5d:79:fb:15:3d:ef:d7:
                    e5:fc:58:eb:bd:e5:a6:40:a6:00:d9:89:95:00:90:
                    51:d7:b7:69:35:a2:46:e0:b1:12:bb:56:1d:f7:48:
                    17:1b:17:e0:c7:83:ed:6b:6a:80:87:bf:b9:c5:99:
                    87:39:0c:88:ca:3e:8a:26:f6:de:47:33:71:01:5e:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:C0:07:B3:B9:24:70:2C:A9:00:03:C8:08:AE:CA:0E:41:44:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9f7a29e-441b-3f72-978c-3f206a7b49be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:ce:9d:70:7e:01:38:fd:c7:1e:01:df:58:fe:e9:be:ab:
         7b:c1:b2:1f:e8:a5:35:35:7c:11:11:68:26:60:9a:59:20:68:
         d6:34:2e:e3:cc:0e:28:c5:23:b2:a9:4d:53:13:9a:34:30:83:
         ce:16:8e:fa:26:94:75:9f:1a:39:d1:59:f1:85:a2:df:d0:0e:
         4d:e8:d9:eb:b3:b0:e7:3e:07:2a:2d:e2:c1:8e:45:92:78:e2:
         67:99:0e:f5:d7:15:da:b1:47:aa:f1:38:18:2c:51:3e:7a:67:
         14:ef:40:fe:ad:98:96:51:87:78:11:79:13:28:50:00:40:1b:
         22:6f:c3:57:32:54:6f:94:5b:88:ae:56:a6:84:bc:2d:39:65:
         a5:19:08:e3:74:31:65:b2:a1:3a:92:fa:6a:4f:de:a4:a7:4c:
         5f:59:17:ee:0e:e6:af:28:9b:ea:ae:29:3e:67:15:28:2d:0a:
         c4:81:04:e6:9b:0c:a0:e0:89:e2:92:83:8c:d1:c9:06:7e:e8:
         9c:3f:b9:d4:d8:57:6b:38:46:b0:12:32:f0:89:23:6b:e7:fb:
         23:b1:a0:92:03:5a:e6:62:1e:92:2d:d0:8e:c3:d3:43:97:81:
         14:24:54:38:67:77:04:28:70:81:95:fc:bc:5a:67:b4:f2:93:
         58:ca:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:15 2026 by rpki-client