Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa
File:                     bb085752-4702-38f3-b1d5-fca3b9db8492.roa (raw, json)
Hash identifier:          9loncuUT7yHYe1qvrcFxbxtuL+Cv6FqXPmcs3etrDas=
Subject key identifier:   2D:83:B0:85:F5:A3:AF:ED:47:2C:00:01:96:96:8D:C5:71:1E:FC:08
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E109002656C2245C030E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        2600:1901:c0a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:09:00:26:56:c2:24:5c:03:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2d00b4e4-b29f-47e5-8b78-7ffe352c62e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:4c:dc:68:c1:07:89:ed:f2:64:83:7c:68:
                    65:30:21:12:5e:f5:58:29:e7:62:2b:62:45:b6:5a:
                    41:bf:75:fd:2e:0b:c5:62:45:4b:36:78:af:8d:a6:
                    99:d7:50:18:32:83:a0:85:47:c5:70:8a:83:66:e9:
                    b2:d3:18:a4:d1:9b:43:5e:49:d4:f6:f9:24:ab:bf:
                    1b:14:a5:61:6b:b3:9a:e7:5e:a8:29:ae:47:b0:28:
                    fc:d4:bd:f1:93:15:f7:9c:99:78:22:57:52:f8:34:
                    81:2c:7d:10:1f:93:a0:39:b4:76:e5:71:8f:30:e1:
                    16:86:94:d6:bb:e2:ed:3f:29:c0:93:72:8e:e3:ee:
                    d7:ee:8e:d5:7f:9e:a1:a9:e2:d7:06:e4:68:c3:e7:
                    c2:48:5c:e3:61:ab:40:cb:2d:97:c6:06:b4:07:a9:
                    d7:58:b6:cf:a3:e2:7b:63:ee:cc:64:7e:99:19:47:
                    ab:ef:2b:93:41:97:c4:3e:b2:bd:bb:e7:1a:07:ed:
                    25:8e:bb:2d:d0:a2:e9:aa:8a:dd:54:6e:6f:cf:a2:
                    70:33:f4:74:4f:86:36:61:e4:8c:d3:83:49:36:bc:
                    f9:de:ed:35:0a:b0:08:db:7e:6c:8b:1e:56:a9:1a:
                    cd:b3:db:28:34:d8:71:b0:cd:98:4d:54:b5:79:09:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:83:B0:85:F5:A3:AF:ED:47:2C:00:01:96:96:8D:C5:71:1E:FC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:c0a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:c8:56:98:d5:b5:30:e6:46:bd:7b:d7:cc:b8:67:2d:9f:
         16:86:1b:59:5d:23:db:b9:05:ec:80:c2:8a:28:90:b2:7a:ce:
         2d:63:0e:4e:14:59:04:7e:aa:f4:39:b8:fb:e7:c9:f5:e3:f4:
         07:1f:d2:66:82:93:fa:bf:d4:03:6f:84:ab:e2:c9:e1:85:84:
         8e:69:2d:31:28:51:24:74:bc:87:17:64:17:a4:41:20:b9:b2:
         ad:8e:34:1e:2e:cc:68:7d:35:dc:3b:ef:b5:6a:46:67:eb:d4:
         ea:a5:d3:52:f0:ec:5d:e2:65:f2:52:a6:c4:07:0a:5c:19:4f:
         15:cf:7e:87:06:ec:25:a1:5a:3e:37:e8:ef:42:71:3d:a2:4f:
         3a:da:fa:d0:7f:97:a5:86:fb:a8:97:d4:6c:8b:9d:fd:b1:17:
         0b:a0:51:33:d9:7f:fa:93:4b:d6:d0:fd:2c:50:b8:fa:73:a7:
         52:d8:4c:7b:9c:47:df:73:64:36:b5:9d:a2:6e:a9:9d:2c:9f:
         59:aa:91:50:6e:dc:70:f4:51:7b:eb:da:e7:b0:ae:76:09:45:
         0d:63:00:c3:af:09:f0:74:8e:fb:b0:80:29:db:85:81:54:d2:
         5c:ee:f5:42:53:41:39:fe:d5:a2:cb:e0:be:ef:ec:5e:ea:bb:
         51:f2:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:00 2026 by rpki-client