Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa
File:                     90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa (raw, json)
Hash identifier:          tZ/JMlS/qCm1StZeVEaUe7nlCndYVwtS8VS9txXOepg=
Subject key identifier:   C2:BB:4D:A3:47:B0:51:71:80:F9:7D:91:0A:72:08:F7:4C:DC:93:9A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584C61918076C8E51D3EFD27D5D0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     11351
IP address blocks:        2600:6000:fdbd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:80:76:c8:e5:1d:3e:fd:27:d5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=b0965eb7-ae6b-4156-a4df-3f9644581a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:6a:7d:73:85:0c:3f:ae:e9:24:7a:c6:f0:
                    b8:9a:d6:c2:6f:40:cb:cc:63:58:ed:4e:3e:ed:79:
                    af:66:66:ec:2a:42:db:4b:4d:bc:8a:51:1c:99:5f:
                    77:f3:8a:8d:7e:28:1a:78:97:3b:c0:99:f5:6c:63:
                    cc:09:b0:e1:31:d7:d7:da:cd:a7:46:e5:13:c8:c4:
                    a6:f0:d2:b5:78:91:68:f2:5d:28:e3:a0:9b:9d:e3:
                    b8:9d:f0:72:bd:3b:7e:54:a1:79:b5:ac:c7:30:af:
                    dc:35:51:af:96:c8:97:d3:15:c3:1c:15:ca:63:82:
                    42:50:c7:25:17:98:19:8c:7e:0d:1c:fd:58:3e:93:
                    77:e2:90:4a:6e:00:23:1f:66:a7:ad:e9:56:7f:45:
                    42:00:46:8b:67:34:ff:c7:62:b0:65:65:eb:94:1a:
                    33:e1:6f:22:9d:5f:0e:70:fb:cd:61:ec:36:45:86:
                    d5:82:4d:97:2a:94:ca:c4:ac:77:ba:be:ce:c5:eb:
                    30:25:8d:7a:80:54:b6:0f:59:e5:82:a3:27:f2:b4:
                    50:36:f5:4c:bc:2c:3c:02:d7:27:f9:a4:8d:da:70:
                    d8:4e:55:6c:5e:28:19:ce:dc:de:a0:e5:9d:07:e9:
                    0c:9e:ac:69:f8:2f:6f:8e:54:2e:ed:79:d8:29:d3:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:4D:A3:47:B0:51:71:80:F9:7D:91:0A:72:08:F7:4C:DC:93:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90f4c7fa-9312-3ee8-b712-7cdd62bca48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fdbd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:89:66:b4:66:c1:13:1a:9b:fa:d5:07:23:e1:97:1d:6f:
         7a:78:20:00:1d:7a:ab:4d:cc:d7:f2:cb:ba:b6:7f:2e:4f:36:
         1c:b6:80:13:d2:ca:11:e9:88:c9:91:3e:8b:d3:6f:d2:62:fe:
         8b:0c:27:75:dd:f0:8e:fa:59:2d:51:37:df:71:75:a3:2d:c6:
         74:a4:9f:b9:1e:5b:a5:b9:3d:2c:e0:39:0c:54:ae:17:7b:cf:
         ba:69:c4:1f:53:3a:bb:c0:79:65:c8:3a:91:87:98:15:1b:eb:
         d5:df:55:13:41:b2:6a:8f:eb:b1:97:2d:3f:ed:be:dd:e7:cc:
         1b:83:79:2e:61:d3:bf:bf:43:c8:ee:31:11:8b:43:d3:ef:56:
         18:cb:43:91:b3:ae:ea:45:e0:8a:23:b3:1e:cc:a8:0f:dc:ec:
         a5:b4:d4:26:db:b3:39:26:09:5f:d3:40:00:41:f1:b1:f0:a1:
         63:78:a2:48:e3:14:80:1a:53:c7:49:75:46:4a:30:b7:65:54:
         5a:71:5c:98:85:43:7d:af:20:87:3b:ee:5a:9b:ef:29:f7:83:
         26:69:df:11:5c:d2:9c:c3:95:1b:13:a4:0b:b9:b7:10:be:d2:
         ad:f4:70:91:7d:7a:7b:ba:a4:a4:0c:66:f2:7f:59:6c:c1:8f:
         f3:4f:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:40 2026 by rpki-client