Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa
File:                     a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa (raw, json)
Hash identifier:          E8TOuLw82ASH5nLiW4zprR9D0JHIg82NGNDjvtu6mJ4=
Subject key identifier:   2C:97:9B:B8:7C:B9:DB:6D:67:89:19:47:B6:C2:B1:D9:78:16:77:70
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA7A080D09A83DCF87D5692C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11344
IP address blocks:        2600:1900:8010:1000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:80:d0:9a:83:dc:f8:7d:56:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=97e75273-a8f3-4f03-98e4-b04f4242e88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:5c:0c:8d:09:a2:5f:12:cf:ea:7b:ab:76:
                    2e:dc:5d:78:f3:75:a2:6d:d2:7c:47:18:f3:ab:ab:
                    5b:d4:ab:a3:30:a4:eb:ee:2c:ef:9b:e1:0e:90:82:
                    1f:95:9b:40:f3:20:d7:b9:c5:36:fd:da:91:62:eb:
                    3b:97:e8:bd:56:41:30:7e:f5:d0:36:05:c2:9c:cc:
                    96:e5:84:7a:07:fd:86:63:a1:47:96:65:34:29:64:
                    41:5a:46:e8:dc:c9:9f:d6:26:62:eb:3f:4c:c6:74:
                    8e:4a:db:af:2f:99:f4:f4:c9:f7:29:95:5b:fa:3d:
                    35:66:70:fd:22:eb:0a:78:14:6e:bb:31:1b:81:db:
                    e5:00:69:bb:82:e9:69:93:77:11:5a:0c:b7:0d:6f:
                    30:61:75:f4:6e:f3:d0:7a:71:2d:0d:75:4a:17:a5:
                    b8:9a:cf:f8:ac:0a:13:97:b2:5a:b3:b1:d6:14:ff:
                    21:e8:dc:39:01:9a:9b:92:08:d4:c3:5d:01:79:46:
                    0e:c4:6f:00:a1:a1:be:63:26:ab:2c:bf:b4:61:25:
                    5f:d3:61:32:05:42:a8:d2:8f:de:78:71:1e:86:3f:
                    15:04:ab:74:68:40:10:ad:96:21:d5:6d:37:0a:39:
                    ea:8a:8a:db:5e:00:1e:f9:8c:98:e7:05:9f:1e:17:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:9B:B8:7C:B9:DB:6D:67:89:19:47:B6:C2:B1:D9:78:16:77:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:8010:1000::/52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:92:89:5b:14:91:0f:db:5d:bf:02:8d:c8:6a:4e:30:90:
         6c:fd:bd:c5:89:9a:8b:2f:b9:25:80:00:b0:75:54:6c:a2:90:
         f8:3e:74:61:89:7e:be:ac:7e:d3:f9:1e:0b:9e:a2:06:b3:84:
         c1:a1:8d:ee:49:34:e4:77:a9:08:86:f7:5c:a8:3d:5d:4b:d4:
         b4:5c:13:aa:b6:3e:20:47:25:3e:d2:95:84:0f:57:1b:64:a3:
         d8:68:cd:85:b9:06:bd:af:89:27:bd:22:b7:e4:38:f6:9f:46:
         eb:34:71:e2:0c:1b:72:3d:69:24:5d:7e:0f:18:62:80:a8:c7:
         5b:17:6a:46:b6:ee:b1:ef:f5:ed:4f:6c:46:c0:71:d5:fd:e4:
         1e:6b:40:be:65:ca:71:00:68:66:bf:c3:e0:4e:80:19:cb:90:
         4c:9f:6a:e1:b5:45:b1:4a:0d:80:3d:3c:e5:ea:33:32:57:5a:
         46:88:59:3c:9d:02:2d:a5:80:af:53:44:39:19:c7:19:c2:38:
         a2:8f:a8:0d:93:89:60:48:f0:2b:86:4a:d0:27:e9:22:4c:0e:
         4d:87:02:2a:da:4d:b2:8b:fb:81:43:ac:31:8a:b7:93:9a:8f:
         b0:c1:9c:7b:95:f8:6e:02:5c:7c:93:da:fd:81:81:52:59:e3:
         1e:57:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:25:02 2026 by rpki-client