Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa
File:                     2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa (raw, json)
Hash identifier:          Cng/g8bVsGXO3uNKtj3Of8K4XmI3WERUxrJT3dM83cU=
Subject key identifier:   0A:49:F4:D6:E4:77:F8:02:3A:91:E9:FE:BE:14:0F:8C:D1:03:0E:6E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E296F1601336044FB2DBD4780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        2600:1902:1f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:16:01:33:60:44:fb:2d:bd:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=d73edae9-8cac-4602-beb9-fcaf2609797b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:fb:ec:7c:89:73:4d:40:f4:98:de:f8:77:
                    87:d2:f7:da:eb:e0:a7:45:c8:e0:71:5d:4e:05:07:
                    92:be:a9:0b:40:ab:a6:ec:8a:f4:52:68:0f:f8:05:
                    95:4e:3a:7b:3d:67:fa:f5:e9:cb:34:0c:2a:37:a6:
                    d1:bc:f9:8e:4f:d2:42:cf:a2:df:c8:81:30:80:95:
                    86:59:4d:2c:41:b3:0b:23:5a:6b:20:cd:df:e3:d6:
                    bf:18:20:6b:31:aa:33:f3:29:8f:d6:92:bc:d8:df:
                    44:3c:6b:cc:96:fd:0d:99:84:c5:c3:79:0b:ea:be:
                    64:51:a1:b9:e9:45:e9:8c:f1:30:92:71:ef:24:64:
                    ff:a8:4e:28:a1:9b:17:22:ee:be:bb:6c:c2:19:9b:
                    37:1d:75:9a:bc:b6:d6:62:d1:c5:73:20:1e:f1:4e:
                    61:13:f5:a4:f8:8a:6c:63:e9:60:77:bc:46:58:07:
                    4a:24:a1:df:06:2a:47:e3:c1:4f:50:79:5e:e9:c7:
                    48:60:8e:ec:18:a5:99:ef:44:5c:da:68:3b:b0:f4:
                    4c:1a:1c:f9:b6:40:f6:25:af:e5:59:82:36:64:e8:
                    85:0b:55:b3:87:40:35:2e:75:bd:f5:61:56:24:39:
                    c2:6b:10:83:a8:c2:a6:f3:09:89:bd:94:f9:b5:c5:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:F4:D6:E4:77:F8:02:3A:91:E9:FE:BE:14:0F:8C:D1:03:0E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:1f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:84:f9:35:0e:ef:f5:50:88:0a:44:f9:14:a3:26:11:6b:56:
         26:84:2b:32:6c:3f:70:dd:9b:20:a5:4a:df:11:b0:2d:99:7a:
         ec:43:83:46:f0:52:92:c3:be:d9:30:ff:05:46:e6:30:dd:ea:
         1e:5e:06:6d:96:cb:9f:5e:72:68:e3:d7:1e:34:77:51:10:22:
         85:fd:8c:f5:63:c0:0b:3f:2e:43:4f:5c:77:05:cd:a4:59:cd:
         5b:28:f1:69:fd:0a:c0:39:47:ca:55:0a:d2:92:d5:69:cc:3a:
         5c:7e:17:d6:75:f9:00:b4:f1:3a:cd:8a:0d:9e:23:1c:d5:0c:
         b2:59:11:de:aa:1e:11:82:de:6d:e3:dd:9d:8b:ed:95:b7:0a:
         ff:8d:19:73:f0:19:db:fa:90:f2:db:4e:87:9e:4b:d6:95:7a:
         df:cd:37:e5:13:88:59:2a:b0:55:4b:56:da:e3:7b:2c:a8:41:
         0d:3e:ff:df:06:ae:53:3e:c0:e9:f9:87:c3:f8:99:de:e4:38:
         42:aa:f8:d6:f5:fe:9a:ad:40:f7:80:01:69:fe:6c:f5:ce:60:
         27:9e:b6:b4:b7:de:e8:4c:7c:bb:47:3e:69:dc:44:55:0f:d9:
         57:e1:61:17:9b:0f:69:a0:61:f3:17:7a:83:f1:68:09:e1:36:
         aa:bd:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:30 2026 by rpki-client