Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1fa1d63-9c89-3fc6-8d61-4a66d0dbc362.roa
File:                     b1fa1d63-9c89-3fc6-8d61-4a66d0dbc362.roa (raw, json)
Hash identifier:          q4E52c8tUgsdeP8AvvO+ZA8DgmwAbsp0fNHavdShXAE=
Subject key identifier:   B1:79:13:32:CE:D3:4D:E9:3C:F1:0B:5B:83:E1:66:5C:2D:81:33:F2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E9BE50C8D6F6048AD0FB95C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1fa1d63-9c89-3fc6-8d61-4a66d0dbc362.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        2600:1902:520::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0c:8d:6f:60:48:ad:0f:b9:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=d2f13ba1-5f24-4f7c-bef0-e9d538df1a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:b8:c6:16:0f:ed:a8:f4:6f:f7:dc:80:c4:
                    5d:c0:08:d7:1e:0f:f7:b4:c6:5d:5a:ab:ad:cb:38:
                    cf:36:67:3f:44:b4:cd:df:ba:b9:58:30:68:42:2f:
                    2e:34:97:1e:93:5f:ef:48:ae:ce:0c:75:d6:6d:cd:
                    1b:10:71:a1:74:9f:72:87:71:ee:5c:79:6b:93:ba:
                    9f:d3:d7:96:56:e0:ab:10:99:be:95:c2:11:22:3b:
                    8e:e5:5c:b3:4c:e1:fd:41:65:9e:a8:ee:b2:cf:6f:
                    62:06:d2:b8:11:1b:ff:6c:be:9f:93:39:84:46:20:
                    8d:6e:da:f0:1e:28:11:ce:ed:c0:11:bd:26:82:34:
                    04:6d:56:64:ad:12:18:0d:7d:d4:52:7f:96:60:9d:
                    e2:c8:32:39:98:a0:64:e9:56:9b:7b:45:bd:00:b9:
                    6b:3d:df:14:17:06:55:1c:5d:b5:65:63:dc:a4:97:
                    7f:08:b8:33:2c:fd:94:15:ac:bc:e7:e9:0e:73:98:
                    bc:6d:9e:ca:be:9a:89:8f:5d:3c:9c:09:88:52:88:
                    6a:83:c4:d7:c0:47:1b:a6:e0:42:1e:ab:e3:d2:e3:
                    c0:24:6a:14:ae:ec:83:b9:e2:37:33:47:1e:4a:3e:
                    f6:68:19:ff:d8:72:4f:a3:4e:cb:3b:f5:45:56:f6:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:13:32:CE:D3:4D:E9:3C:F1:0B:5B:83:E1:66:5C:2D:81:33:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1fa1d63-9c89-3fc6-8d61-4a66d0dbc362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:38:75:b7:60:b2:ce:3f:5d:f2:ea:8f:e5:25:35:d8:fa:d4:
         6d:95:70:52:42:8c:4d:f2:df:a0:8e:ea:89:57:9f:63:96:a7:
         7f:b5:ca:00:44:bf:dc:c2:a1:2b:9d:71:bb:5b:bb:62:63:df:
         01:77:76:2b:5e:85:bc:bc:fa:e0:0f:26:13:aa:1c:70:7e:5b:
         53:81:8c:72:76:4b:d4:11:2f:a2:19:e8:e0:3d:6b:f0:c7:16:
         6b:ec:78:98:9f:37:66:b8:01:76:22:86:09:6b:4d:08:0a:62:
         88:46:d7:7c:c4:c1:eb:0f:68:31:c1:d4:36:51:9a:59:f0:b5:
         22:b7:9b:c7:2e:b5:ff:e3:43:f8:08:0d:3a:cc:a9:a5:01:e8:
         ea:f5:a6:1e:1d:a9:a4:a4:40:74:5b:df:56:be:f9:26:35:39:
         68:25:52:b5:54:6f:b4:14:1e:20:ab:27:75:26:66:2a:eb:29:
         91:a7:7f:8f:d9:ef:60:1a:21:b5:cb:c5:49:3e:c5:08:91:43:
         90:40:96:95:a3:a0:f0:25:da:a5:30:d9:37:c9:1c:33:c3:5f:
         98:c3:66:f4:b5:12:3f:94:5c:a3:96:df:34:64:db:67:e4:3e:
         a8:fc:86:10:71:96:b8:7f:54:93:47:86:f4:af:85:ac:93:9b:
         81:82:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:19 2026 by rpki-client