Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
File:                     09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa (raw, json)
Hash identifier:          wzILzkFBnu7K1aNwHRzyk2lQdXNlbWVy+140Vkkg6tQ=
Subject key identifier:   38:AC:1F:A4:20:B5:7F:65:6B:0F:DD:47:4D:24:30:C0:E7:EF:66:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584C45A75AFFC8A6E8E424BDB1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     11344
IP address blocks:        2600:1900:4110:800::/54 maxlen: 54
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:5a:ff:c8:a6:e8:e4:24:bd:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=adf492c6-d544-432a-8769-b5d86c6ac256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:64:ad:bc:6d:13:c5:d0:95:04:a7:44:db:
                    9c:2c:e0:e9:43:8d:b4:8d:35:ee:58:8a:f5:34:1f:
                    ca:db:ef:32:5d:52:60:fe:2c:9f:20:b7:55:f0:75:
                    01:5f:49:69:95:bf:fb:60:e6:99:93:b4:7b:f6:65:
                    be:72:39:48:5f:91:6a:e4:ac:cf:6c:4c:2b:5a:9b:
                    88:71:34:77:fe:3a:e1:fd:ac:ae:f8:92:8d:fd:69:
                    de:ac:d8:2f:d4:f6:1a:26:41:1c:50:3e:96:81:4b:
                    d5:88:0e:d8:3c:85:27:fb:d5:79:4b:e2:78:24:b8:
                    83:1a:2d:69:76:94:8f:20:ad:ad:a0:f4:e6:53:bb:
                    ed:c9:69:46:bb:e5:65:63:c1:18:c0:34:11:3e:b5:
                    47:2b:5c:41:e9:83:39:e9:aa:23:68:a9:14:6a:f7:
                    e6:ee:fd:a4:d5:b6:ff:91:10:98:f0:a6:56:1d:4a:
                    20:12:46:8a:6d:b4:d1:8d:0f:99:ff:57:26:2e:54:
                    07:47:16:8f:63:0f:ff:c3:3e:e8:17:10:5e:1f:49:
                    df:e2:25:6e:62:5a:94:ca:86:c6:50:95:ef:0a:f0:
                    9b:bf:fd:6f:71:d5:ab:9d:bf:fc:56:5b:91:dd:4f:
                    51:c2:a9:e5:f3:7b:60:2a:9f:be:17:96:55:ba:a9:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:1F:A4:20:B5:7F:65:6B:0F:DD:47:4D:24:30:C0:E7:EF:66:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:800::/54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:15:99:af:0c:7f:c9:27:de:a7:f8:3a:02:3b:a8:a9:2d:22:
         e1:31:45:a8:28:ea:44:4f:9e:25:9f:42:eb:3b:5c:e6:3a:43:
         61:11:d5:c4:88:56:30:f6:7a:23:3b:7e:f5:49:bb:ff:9f:13:
         c3:1d:46:23:f5:88:f3:39:3b:42:0b:74:cb:43:14:d0:3c:e7:
         16:97:a0:53:b8:9a:d5:5a:94:99:a5:a9:6c:96:f1:48:1b:e7:
         87:f4:58:26:64:03:52:aa:8f:1f:84:fd:ac:21:16:db:aa:3f:
         f1:49:62:ee:ee:86:73:a5:e8:7a:41:f3:7a:70:82:69:23:24:
         3a:21:e7:c1:04:96:0e:b8:2a:17:49:64:b5:fd:83:b6:30:ed:
         9b:cc:e2:d4:fe:35:86:65:92:1a:be:b4:52:65:90:53:ef:48:
         ea:56:94:05:00:b1:b8:0f:36:4b:a7:7c:81:7c:db:a2:a5:f6:
         26:13:5b:e4:46:25:54:9b:ba:f0:58:76:57:2e:ac:bd:42:01:
         33:18:a8:73:18:2e:b9:be:ea:6f:91:a2:8f:85:ec:33:17:32:
         b3:f1:04:d9:04:07:fa:81:06:fe:4f:c8:40:93:7b:e7:46:cc:
         93:69:88:36:64:e1:9b:2c:e3:a1:45:14:2f:0a:5e:69:38:ae:
         2f:a5:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:18 2026 by rpki-client