Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3812a323-f2c2-3424-9930-a4000f24c89b.roa
File:                     3812a323-f2c2-3424-9930-a4000f24c89b.roa (raw, json)
Hash identifier:          aOilNgXpbOgC6SRKUUMCkf2I+Xas/j6HlSSW412r20M=
Subject key identifier:   2A:18:AD:15:9D:CD:76:C4:07:D1:40:FB:64:F6:30:B4:8D:59:EB:CD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA79EE71EAF6753D9332BB700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3812a323-f2c2-3424-9930-a4000f24c89b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        2600:1900:4110:c00::/55 maxlen: 55
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:e7:1e:af:67:53:d9:33:2b:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7ee1cef2-cebf-4716-a4fd-08cd9876ca40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:49:5e:d2:30:bc:ba:e0:5c:7c:2d:8d:7b:
                    52:4c:09:9f:71:90:c7:2b:82:4e:ce:b4:7f:f9:17:
                    f6:1f:3c:a2:9a:b3:3b:06:89:d9:56:ed:43:ab:97:
                    02:88:80:74:0e:1b:79:23:e5:8c:61:56:7f:17:c6:
                    fa:b5:1e:c8:80:ff:20:0c:29:c1:c4:ab:7b:35:22:
                    f9:ef:d4:4b:82:49:df:3d:78:74:43:9a:38:98:81:
                    31:be:88:cf:d5:68:70:d7:f3:32:6c:30:28:49:43:
                    41:d3:56:6f:02:64:06:92:5d:36:01:6e:d5:2f:96:
                    e6:3b:bc:e9:5a:48:0f:ef:bd:0a:17:31:57:1b:b7:
                    b1:b8:16:17:99:b9:7b:75:2e:0e:d9:b8:b5:1c:73:
                    41:01:d5:d4:d6:ef:b1:61:09:d9:56:c2:1c:94:78:
                    0b:a5:a8:3f:2f:88:1e:57:b9:4e:b8:93:31:ce:0a:
                    77:b9:73:d8:14:8b:5e:79:cc:c9:39:1f:22:d3:1a:
                    52:69:50:09:a1:36:8e:5e:42:e8:2e:40:50:23:49:
                    27:e6:5e:d1:26:ba:75:9d:67:e5:2f:a0:cb:5c:15:
                    33:a0:ad:16:3b:85:28:ee:4c:0e:84:4c:b0:10:94:
                    21:87:72:91:a1:27:fd:de:84:8d:ed:d5:53:00:ec:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:AD:15:9D:CD:76:C4:07:D1:40:FB:64:F6:30:B4:8D:59:EB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3812a323-f2c2-3424-9930-a4000f24c89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:c00::/55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:e5:23:ec:80:48:20:8c:39:bc:28:2f:03:72:60:9b:4c:
         b9:ee:76:42:f1:3a:42:d8:6a:5d:03:e4:e8:b8:40:2f:d1:10:
         71:76:28:aa:cc:93:57:65:cb:9d:2e:ec:6c:13:5a:3d:8a:59:
         fb:32:31:9c:e2:ef:65:c6:98:f4:da:c9:85:cd:a9:38:83:24:
         9a:6e:11:5b:8b:b0:3c:95:f4:50:43:d5:38:87:3a:eb:ac:3a:
         f5:08:1b:bc:98:94:3b:c1:11:bc:e7:00:19:36:e4:4d:30:c4:
         a9:09:2e:20:98:1a:24:a4:58:da:04:07:a6:a6:23:16:65:44:
         d9:4a:12:f1:7f:b4:d5:70:73:e9:db:fe:c8:28:3e:6d:1a:36:
         a7:6c:07:95:1a:5a:c6:84:a0:c8:e0:0f:74:98:22:9a:80:db:
         35:78:b0:2d:10:3e:d7:96:d3:16:c6:1a:31:dc:25:36:36:99:
         4b:0c:e2:26:c1:c8:a8:7f:d4:f6:70:b3:12:c3:4b:d0:7c:8f:
         af:66:f1:34:33:e4:9b:e6:c8:7b:a9:8c:fe:8c:3c:0f:2d:dd:
         be:04:20:16:eb:d1:75:53:38:51:4c:be:9f:0a:57:0f:81:16:
         0d:61:55:31:fb:75:2c:29:3b:03:2f:80:7e:37:64:fb:6f:6c:
         c0:4b:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:01 2026 by rpki-client