Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4aade81-e51a-3e08-863b-9cb5f2877357.roa
File:                     f4aade81-e51a-3e08-863b-9cb5f2877357.roa (raw, json)
Hash identifier:          apa2zEs26mQxL6cLD1mKe1EJ4Pz6ClVZwVFli+HbtjQ=
Subject key identifier:   38:5D:79:8A:2F:31:6A:CC:73:BB:7B:9D:8F:64:E7:4E:38:F6:EF:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E059BD5076D393CCBF30F61E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4aade81-e51a-3e08-863b-9cb5f2877357.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        2600:1901:c0c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d5:07:6d:39:3c:cb:f3:0f:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b8677c02-892e-4c25-b70d-e3bb0ebe919b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:d3:bf:be:f6:01:ee:d8:ea:88:4e:5e:7d:
                    dd:02:c1:f2:3e:9e:20:e2:ad:21:76:1d:50:c1:aa:
                    24:fd:db:9a:dd:34:ce:22:91:55:06:6b:e5:74:b4:
                    8a:a3:84:8d:21:2a:d0:53:82:7f:5b:b9:ff:47:0f:
                    71:c1:dd:c3:93:62:09:c2:88:73:4a:25:4d:2f:c5:
                    87:0a:36:02:bc:0c:39:e3:1d:15:ee:32:6f:2a:2f:
                    0e:b5:cd:3e:a8:ae:28:96:17:62:f4:71:9b:10:da:
                    cd:2a:b6:81:bf:35:07:b0:3a:93:4a:94:88:3f:1e:
                    d2:5f:94:41:43:43:67:5d:19:fd:e1:64:b4:b8:88:
                    57:ba:5e:be:09:fe:a2:e8:e1:87:53:6d:d9:98:34:
                    ce:fe:45:8d:a4:00:2b:7f:53:d2:b6:00:36:99:b8:
                    e9:25:64:39:ff:2e:9f:9f:40:a8:42:69:75:26:d1:
                    05:92:62:42:8c:6f:43:c8:ab:50:e5:20:c9:70:c9:
                    18:4a:ef:45:a4:ce:bd:ed:29:96:32:5d:46:83:7c:
                    fa:60:bd:3b:1b:9c:0d:0b:15:98:7a:4d:cd:60:21:
                    9c:db:f3:57:52:a4:18:17:21:d1:53:ab:ae:45:12:
                    d3:1b:69:3c:da:3e:bc:d2:cc:0e:9b:88:1f:91:8e:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:79:8A:2F:31:6A:CC:73:BB:7B:9D:8F:64:E7:4E:38:F6:EF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4aade81-e51a-3e08-863b-9cb5f2877357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:c0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:81:87:1b:67:3a:66:ec:26:57:d1:c0:ea:53:ed:02:59:21:
         83:a5:f6:e3:30:88:8b:45:f4:40:11:91:58:01:50:0a:f9:b5:
         fc:e5:65:b9:3b:4b:2c:0d:00:cc:2e:9a:9a:ea:b4:1d:86:df:
         fb:c2:3c:27:06:05:fe:4c:5b:4a:94:5b:bd:10:9c:4e:a6:59:
         04:11:b2:de:9e:be:3b:d7:13:78:ec:de:33:e4:6d:b1:3c:26:
         b8:d2:a6:8f:4a:5b:a8:f3:57:ee:cc:98:ff:a0:c8:71:a5:e0:
         cb:48:23:91:0a:4a:30:1b:26:7c:71:14:81:fb:43:3f:56:f2:
         76:81:3e:ce:5d:e6:21:d6:4e:1d:e0:01:67:bb:73:d8:ee:13:
         72:f2:e4:7b:16:c1:96:14:af:72:7a:9f:3c:a3:33:8b:cb:a3:
         f9:d4:86:b5:dd:ed:1a:ea:85:30:cb:f2:bd:0f:35:4c:a2:fd:
         ac:cb:74:09:60:51:2c:8c:37:a2:6b:bd:ac:08:ac:08:ec:7f:
         27:63:96:9d:1d:19:ea:b1:80:51:ca:37:27:fe:85:c2:95:d3:
         14:aa:80:a5:95:e9:39:fa:8e:84:1a:66:ed:ca:f0:1f:22:e1:
         7d:93:22:ba:26:fb:c3:82:df:79:b2:35:ba:6f:09:22:9a:73:
         74:dc:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:45 2026 by rpki-client