Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bb3c6d8-2dec-3e7e-918d-c6059350803a.roa
File:                     3bb3c6d8-2dec-3e7e-918d-c6059350803a.roa (raw, json)
Hash identifier:          Rs1hGSW6Adf19N5/7ENucdj73sbyWNpe+Ymt2nV2YDA=
Subject key identifier:   C5:56:19:33:CF:9F:D5:6B:ED:6A:BA:BB:AE:E9:4C:F2:15:BD:19:CE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CDB149E4F28B7DDA4FDCC2F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bb3c6d8-2dec-3e7e-918d-c6059350803a.roa
Signing time:             Sat 14 Feb 2026 02:38:13 +0000
ROA not before:           Sat 14 Feb 2026 02:38:13 +0000
ROA not after:            Fri 15 May 2026 01:38:13 +0000
asID:                     19527
IP address blocks:        2600:1902:540::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:14:9e:4f:28:b7:dd:a4:fd:cc:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 14 02:38:13 2026 GMT
            Not After : May 15 01:38:13 2026 GMT
        Subject: CN=0a0d0029-dd29-4f47-96da-829edb791ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:fe:79:47:74:5a:51:0d:bc:0d:3e:b9:a6:
                    84:15:2e:a1:88:7f:75:11:8d:69:16:cf:3f:01:ec:
                    9a:b4:7a:35:1a:6a:ac:68:d7:ca:2c:cb:44:2e:d5:
                    89:6b:8a:bc:e6:51:bd:ad:8c:b6:11:43:cd:40:10:
                    9a:e6:22:97:eb:cb:91:19:4a:08:47:a3:e2:af:48:
                    52:8b:dc:70:17:91:fe:27:e4:4d:1c:2f:ae:23:0c:
                    03:24:6d:a8:a1:85:fa:f1:d2:7f:fe:cc:1d:42:e2:
                    b1:5f:5d:7f:51:c3:a8:b6:c6:1a:a1:43:95:14:9f:
                    57:41:90:20:09:03:1c:6c:50:4d:1a:16:74:91:b2:
                    3d:3b:c0:0a:ef:e1:c0:07:61:8a:21:02:25:a4:6a:
                    75:1d:ec:32:f1:fb:28:9a:fd:3c:ab:b9:97:e0:c3:
                    d3:62:87:28:fd:64:29:7d:36:3b:42:ca:0e:fa:1b:
                    a3:75:6f:70:8b:8c:5f:58:7f:23:74:55:fd:8c:a6:
                    86:f9:0d:75:8c:75:1b:4b:8d:52:a0:c5:fd:6a:1e:
                    1b:45:dd:e4:67:46:96:67:82:fe:1e:c9:19:f7:68:
                    5c:26:9e:59:b1:a3:db:ec:87:32:c0:f8:6f:d0:0e:
                    c1:75:b6:94:66:3a:cd:0c:4f:20:ef:f4:cb:e5:73:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:19:33:CF:9F:D5:6B:ED:6A:BA:BB:AE:E9:4C:F2:15:BD:19:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bb3c6d8-2dec-3e7e-918d-c6059350803a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:540::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:15:c6:ea:5f:5c:9d:7f:83:db:ac:eb:92:eb:57:a8:d3:fa:
         dc:1b:60:97:56:41:fa:bd:7f:c5:67:3b:1d:b9:9a:f5:8f:cd:
         ee:8c:dd:68:21:67:8d:03:85:80:9d:f2:68:2e:6b:9f:00:dc:
         d0:43:b2:e1:b6:61:71:72:98:8f:3a:4a:8a:d6:b4:c5:c6:75:
         10:02:a8:35:8f:d1:a8:ef:a6:d9:fa:6b:4c:5d:05:13:41:23:
         ef:03:18:f5:3f:95:0b:45:ef:09:8c:39:7a:78:c8:f7:1c:59:
         73:64:8b:03:83:41:db:ee:7e:09:e7:ec:0c:f7:b3:9e:dc:40:
         a8:10:1d:95:39:20:da:dc:62:7e:7f:3b:2d:b7:3a:66:57:7c:
         4b:e1:62:a1:6c:86:80:97:18:4d:cf:79:46:86:91:d9:41:8a:
         15:4b:f6:23:c3:29:61:54:a3:5b:63:4e:ff:fd:dd:1c:ef:aa:
         08:72:3b:4f:c7:bb:49:c0:48:3c:3d:7f:5a:b7:10:74:b4:c2:
         ad:9c:43:c2:4e:16:98:ec:50:54:f1:98:04:2d:75:c1:0d:09:
         e4:16:cb:14:91:2b:76:fd:04:d4:85:81:b5:05:30:d0:87:2b:
         a1:33:c4:51:90:0b:d1:fe:0b:ed:f3:60:84:ee:83:40:9f:1b:
         24:c7:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:19:08 2026 by rpki-client